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Abstract 

We  present  a  new  proof  of  cut  elimination  for  linear  logic  which  proceeds  by  three  nested  structural 
inductions,  avoiding  the  explicit  use  of  multi-sets  and  termination  measures  on  sequent  derivations. 
The  computational  content  of  this  proof  is  a  non-deterministic  algorithm  for  cut  elimination  which 
is  amenable  to  an  elegant  implementation  in  Elf.  We  show  this  implementation  in  detail. 
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1  Introduction 

The  property  of  cut  elimination  [Gen35]  is  a  central  property  of  logical  systems  in  a  sequent 
formulation.  It  usually  yields  consistency  as  an  easy  corollary  and  forms  the  basis  for  efficient 
proof  search  procedures  [Wal90]  and  logic  programming  languages  [MNPS91].  In  linear  logic,  the 
algorithm  for  cut  elimination  may  also  be  given  a  computational  interpretation  [Abr93].  Traditional 
sequent  formulations  of  linear  logic  [Gir87]  are  not  well-suited  to  a  deep  analysis  of  cut  elimination 
because  of  the  disturbing  effects  of  weakening  and  contraction  of  modal  formulas  of  the  form  \A 
and  ?A.  This  led  to  the  discovery  of  proof  nets,  but  the  question  of  cut  elimination  for  a  more 
syntactic  sequent  calculus  remains  important  for  applications  of  linear  logic  in  computer  science. 

In  the  literature  one  can  find  formulations  of  linear  logic  in  which  applications  of  structural  rules 
are  more  controlled  than  in  CLL,  a  system  with  explicit  weakening,  contraction,  and  dereliction 
for  modal  formulas.  This  is  achieved  by  dividing  a  sequent  into  linear  and  non-linear  zones  whose 
constituents  are  treated  differently  in  the  sequent  rules.  Examples  of  such  calculi  are  Andreoli’s 
112  [And92],  Girard’s  LU  [Gir93],  and  Hodas  &  Miller’s  C  [HM94,  Hod94].  We  take  a  two-sided 
version  of  classical  linear  logic  quite  close  to  S2  with  three  rules  of  Cut  as  in  LU  and  endow  the 
resulting  calculus  LV  with  proof  terms.  We  then  prove  admissibility  of  the  cut  rules  in  LV  by 
three  nested  structural  inductions.  Cut  elimination  follows  by  an  additional  structural  induction 
on  sequent  derivations  possibly  containing  cuts.  The  seeds  for  this  proof  may  already  be  found 
in  [Hod94],  where  cut  elimination  is  proven  for  £,  a  fragment  of  intuitionistic  linear  logic. 

We  show  how  linear  sequent  derivations  may  be  represented  faithfully  in  the  logical  frame¬ 
work  LF  [HHP93]  and  how  this  representation  may  be  improved  if  the  framework  itself  already 
possesses  linear  features.  We  also  present  an  elegant  implementation  of  the  algorithm  for  cut  elim¬ 
ination  implicit  in  our  constructive  proof  of  the  cut  elimination  theorem.  This  implementation  is 
in  Elf  [Pfe91],  a  constraint  logic  programming  language  based  on  LF. 

2  CLL:  A  Traditional  Sequent  Calculus  for  Linear  Logic 

In  this  section  we  present  a  traditional  sequent  calculus  CLL  for  linear  logic.  There  are  so-called 
one-sided  formulations  (in  which  the  involutive  negation  is  defined  except  on  atomic  formulas)  and 
two-sided  formulation,  where  negation  is  sometimes  defined  via  linear  implication  and  falsehood. 
Here  we  chose  a  slightly  different  two-sided  presentation,  where  negation  is  primitive,  but  where 
we  restrict  ourselves  to  one  multiplicative  and  additive  connective  and  constant.  This  is  sufficient 
to  define  all  other  connectives;  taking  them  as  primitive  would  only  add  tedium,  but  nothing 
essentially  new  to  the  calculus.  We  use  x  and  y  for  variables,  a  for  parameters  (that  is,  variables 
occuring  free  in  derivations),  t  for  first-order  terms,  and  P  for  atomic  formulas  p(ti, . .  ■ ,  tn)- 

Formulas  A  ::=  P  |  Ai  0  A2  ]  1  |  A1&A2  |  T  |  A"*"  |  Vx.  A  |  !A  [  ?A 
Sequences  F  ::=  •  |  F,  A 

We  use  A,  B,  and  C  for  formulas,  F,  A  and  later  ’4’  and  0  for  sequences  of  formulas.  We 
overload  the  comma  and  write  F  =  F^,  A  or  F  =  A,  FMf  F  is  the  result  of  adding  one  occurrence 
of  A  at  any  position  in  FL  Similarly,  F  =  Fi,F2  consists  of  all  formula  occurrences  from  Fj  and 
F2.  We  also  omit  a  leading  ■  for  the  sake  of  brevity.  Another  way  of  expressing  these  conventions 
is  to  state  that  we  treat  sequences  F  of  formulas  as  multi-sets.  A  sequent  of  CLL  has  the  form 
p  — ^  A.  We  refer  to  formulas  in  F  as  hypotheses  ot  negative  formulas,  to  those  in  A  as  conclusions 
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or  positive  formulas.  We  consider  a  sequent  a  judgment  defined  by  the  following  inferences  rules. 
We  avoid  explicit  exchange  rules  by  the  conventions  stated  above. 

Axioms. 


A=»  A 


Multiplicative  Connectives. 

Ai  r2=>R,A2 
Fi,  r2  A  ®  B,  Ai,  A2 


■®R 


F,A,R=^  A 
T,A®  B  =>  A 


-®L 


A 

■IB  - II 

F,1  A 


Additive  Connectives. 


F^A,A  F=>B,A 
F  =>  A&B,  A 


■  StB 


T=^T,A 


-TR 


F,A^  A 
F,A&B  =^>  A 

T,B=>  A 
T,A&B  =>A' 


No  T I  rule 


■  &I1 


&I2 


Involution. 


F,A=>A  r=^A,A 

nB - .1 


F==>  A-^,A 


r,A  A 


Quantification. 


F  ==>  [a/a;]A,  A  F,  [t/x]A  =>  A 

-VB“  - VI 


T=>'^x.A,A 


r,Va:.  A=>  A 


Exponentials. 


!F=^A,?A  r,A=^A 

•!B  - !I 


!F=>!A,?A'  r,!A=:>A 
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A,A 

- ?R 

r  =>  ?A,  A 


!r,A=>?A 

- ?L 

!r,  ?A  =>  ?A 


Structural  Rules. 


A 


w\ 


T,\A=^A 

T,  !A,  !A  =>  A 

- C! 

r,  !A  A 


r  ?A,  ?A,  A 
- c? 

T=>?A,A 


In  the  rule  VR  the  parameter  a  must  be  new,  that  is,  it  may  not  occur  in  E,  Vx.  A,  or  A.  The 
notation  IF  and  ?A  In  the  \R  and  ?L  rules  expresses  the  side  conditions  that  all  formulas  in  these 
sequences  must  have  the  form  IB  and  ?C,  respectively.  The  rule  of  Cut  below  turns  out  to  be 
admissible  and  thus  does  not  need  to  be  included  as  a  primitive.  We  eventually  establish  this  by  a 
detour  via  the  system  LV  introduced  in  the  next  section. 


Cut. 


ri==^A,Ai  r2,A=^A2 


Fi,  r2  =>  Ai,  A2 


Cut 


Exploiting  the  symmetries  of  classical  linear  logic,  we  can  define  the  remaining  linear  connectives 
that  are  ordinarily  used. 

A^B  = 

A^B  =  {A-^®B^)^ 

T  =  1-L 

A®B  =  {A-^&B-^)-^ 

0  =  T-^ 

3x.  A  =  (Vx.  A^)^ 


3  LV:  Another  Sequent  Calculus  for  Linear  Logic 

In  this  section  we  present  a  formulation  of  a  sequent  calculus  for  linear  logic,  called  LV  very  close  to 
Andreoli’s  dyadic  system  E2  [And92]  and  similar  to  Girard’s  LU  [Gir93].  It  may  also  be  considered 
a  complete  classical  analogue  of  Hodas  &  Miller’s  £  [HM94,  Hod94],  a  formulation  of  a  fragment 
of  intuitionistic  linear  logic.  LV  will  be  amenable  to  a  structural  proof  of  cut  elimination  following 
ideas  from  an  analysis  of  intuitionistic  and  classical  sequent  calculi  [Pfe94].  Andreoli’s  goal  is  to 
study  a  paradigm  of  concurrent  computation  as  search  for  restricted  linear  derivations,  so  he  does 
not  endow  E2  with  proof  terms,  nor  does  he  prove  cut  elimination  for  it.  However,  he  analyzes 
its  relationship  to  CLL.  Hodas  gives  an  explicit  proof  of  cut  elimination  for  C  in  [Hod94],  which 
contains  many  of  the  same  basic  ideas  we  employ  here.  However,  his  proof  cannot  be  structural, 
since  he  does  not  introduce  proof  terms. 

Constructive  cut  elimination  in  a  sequent  formulation  is  difficult  due  to  the  nature  of  the 
structural  rules,  especially  contraction.  Girard  [Gir87]  uses  proof  nets  (instead  of  a  sequent  calculus) 
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for  his  strong  normalization  theorem  partly  for  that  reason.  Galmiche  and  Perrier  [GP]  give  a 
syntactic  analysis  of  permutabilities  of  rules  in  a  sequent  calculus  and  apply  it  to  cut  elimination; 
our  own  analysis  does  not  go  quite  as  far,  but  we  have  a  simpler  proof  of  cut  elimination.  We 
conjecture  that  their  presentation  could  be  streamlined  using  our  linear  sequent  calculus. 

The  main  challenge  is  to  isolate  the  non-linear  reasoning  and  the  associated  structural  rules. 
Assume  we  attempt  to  prove  that  the  conclusion  of  the  cut  rule  has  a  cut-free  derivation  by  nested 
inductions  on  the  size  of  the  cut  formula  and  the  sizes  of  the  cut-free  derivations  of  the  premises. 
In  the  case  where  the  cut  formula  is  contracted  we  encounter  some  difficulties. 

r2,U,!A^A2 

^  - Cl 

r2,!A^A2 

- Cut 

Pi,  r2  =>  Ai,  A2 

It  follows  from  the  induction  hypothesis  that  one  copy  of  !A  can  be  eliminated  from  £i  by  a  cut  of 
V  and  £i  yielding  a  cut-free  derivation  of 

ri,r2,!A=4>  Ai,  A2, 

but  how  do  we  proceed  from  here?  We  cannot  apply  the  induction  hypothesis  to  V  and  £[ ,  since 
the  size  of  the  cut  formula  ! A  is  still  the  same,  but  £[  may  be  much  larger  than  £\ .  Moreover,  due 
to  the  multiplicative  nature  of  the  cut,  we  would  obtain  a  derivation  of  Pi,  Pi,  r2  Ai,  Ai,  A2 
and  not  of  Pi,P2  ==>  Ai,A2  as  needed.  Since  contraction  is  not  valid  in  general,  but  only  for 
modal  formulas,  this  second  problem  cannot  be  easily  repaired  as  in  the  case  of  classical  logic. 

The  solution  is  to  eliminate  the  structural  rules  (in  the  example  above  contraction)  as  much 
as  possible.  To  this  end  we  divide  a  sequent  into  linear  and  non-linear  zones  as  in  Andreoli’s 
E2  [And92]  and  Girard’s  LU  [Gir93].  Contraction  and  weakening  are  no  longer  required,  since 
the  non-linear  zones  are  maintained  monotonically:  In  each  inference  rule  arbitrary  non-linear 
side  formulas  are  permitted  and  copied  to  all  premises,  thus  eliminating  the  need  for  contraction. 
Moreover,  arbitrary  non-linear  side  formulas  are  permitted  for  axioms,  eliminating  the  need  for 
explicit  weakening.  What  remains  is  a  form  of  the  structural  rule  of  dereliction  combined  with 
contraction:  We  must  be  able  to  copy  formulas  in  the  non-linear  zones  into  the  linear  zones.  This 
copying  is  controlled  enough  to  allow  a  structural  proof  of  admissibility  of  cut  (and  cut  elimination 
as  a  corollary) . 

We  continue  to  use  the  following  complete  fragment  of  classical  linear  logic;  the  remaining 
connectives  can  easily  be  defined.  P  stands  for  atomic  formulas. 

Formulas  A  F  |  Ai  ®  A2  1  1  |  A1&A2  |  T  |  A^  |  Vx.  A  |  !A  |  ?A 

A  sequent  has  the  form 

A;0 

which  may  be  interpreted  as  !^ ,  P  — >  A,  ?0  in  ordinary  linear  sequent  calculus.  Thus  the  outer 
zones  in  the  sequents  represent  non-linear  hypotheses  and  conclusions,  the  inner  zones  must  be 
treated  linearly.  Note  that  formulas  of  the  form  !A  and  ?A  may  occur  freely  in  P  and  A.  We  omit 
the  non-linear  zones  and  0  if  they  are  empty  and  simply  write  P  — >  A  for  •;  T  — >  A;  -.  On  our 
connectives  the  calculus  is  defined  by  the  following  rules. 
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Axioms. 


A;e 


I 


Multiplicative  Connectives. 

t;ri-^A,Ai;e  ^;r2  — )-B,A2;e 

^;ri,r2  — >  A®  b,Ai,A2;Q 


®R 


r,  A,  S  — ^  A;  e 
■9;T,A®B  — )■  A;0 


®L 


IR 


^;r— 4  A;0 
^;r,l  ^  A;0 


■IL 


Additive  Connectives. 


^r;r-^A,A;0  ^;r— >B,A;0 

^;r  — 4  A&5,A;0 


SiR 


^;r,A— >  A;0 
^;r,A&5  — )•  A;0 

— 4  A;0 
'9;T,A&B  — )•  A;0 


•  &Li 


&L2 


^■T-^T,A;e 


No  TX  rule 


Involution. 


^;r,A  — )•  A;0 
^;r — )•  A-^,A;0 


^;r— 4- A,A;0 
^  A;0 


Quantification. 


$;r — >[a/x]A,A-,Q  T,  [t/xjA  — 4  A;  0 

- Vi?“  - -VL 


— >yx.  A,A-e 


'f;r,Vx.  A — >A-e 


Exponentials. 


4A;0  ('$,A);r— 4  A;0 

- \R  - 

4!A;0  (r,  !A)  — 4  A;  0 


\L 


^;r-^A;(A,0) 

$;r-4(?A,A);0 


■?R 


4-;e 
$;?A  — 4  •;0 


-?L 
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Structural  Rules. 


(^,A);(r,A)— >A;©^ 
(^,A);r-^A;0 


$;r^(A,A);(A,0) 

- ?D 

>A;{A,0) 


In  the  rule  Vi?  the  parameter  a  must  be  new,  that  is,  it  may  not  occur  in  F,  Vx.  A,  A,  or  0. 
There  are  three  rules  of  cut,  which  we  show  to  be  admissible  rather  than  taking  them  as  primitive. 

Cut. 


«r;ri^A,Ai;0  ^;r2,A^A2;0 


^;ri,r2 

A;0  (^,A);r^A;0 


— >  A;0 


•Cut! 


■Cut 

Aj,  A2;  0 

4  A;(A,0)  ^;A 


•;0 


'f;r 


A;0 


■Cut? 


This  system  satisfies  weakening  and  contraction  in  the  non-linear  zones:  We  can  adjoin  a  formula 
to  the  non-linear  zones  of  each  sequent  in  a  derivation  to  achieve  weakening,  or  substitute  the  use 
of  one  formula  for  another  to  achieve  contraction.  In  either  case  the  structure  of  the  derivation 
does  not  change. 

Lemma  1  (Elementary  Properties  of  LV) 

1.  (WL; A;0  t/ien  ('5f,A);r-^A;0. 

A  (WR; A;0  t/ien$;r— ^  A;(A,0). 

3.  (CL)  A,A);r  — ^  A;0  then  («r,  A); F  — ^  A; 0. 

4.  (CR)  If^;T  A;(A,A,0)  then  $;F  ^  A;(A,0). 

Proof:  By  simple  inductions  over  the  structure  of  the  derivations  of  the  assumption.  Note  that  the 
constructed  derivation  differs  from  the  one  in  the  assumption  only  in  that  a  non-linear  hypothesis 
or  conclusion  has  been  added  or  erased.  □ 

We  can  now  show  the  equivalence  of  LV  and  CLL. 

Theorem  2  (Equivalence  of  LV  and  CLL) 

1.  //$;F  — ^  A;0  then  !^,F^A,?0. 

2.  If  15',  F  A,  ?0  where  formulas  in  F  and  A  are  not  of  the  form  \A  and  I  A,  respectively, 
then  ’T;  F  — ¥  A;  0. 

Proof:  By  structural  inductions  over  the  derivation  in  the  assumption,  using  non-linear  weakening 
and  contraction  from  Lemma  1. 
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Soundness  of  LV.  The  proof  proceeds  by  induction  over  the  structure  of  X>  ::  (5^;  E  — >  A;  Q). 
This  is  the  simpler  of  the  two  directions.  We  only  show  a  few  cases;  all  others  are  similar. 

Case: 

-n  - 1- 

Then 


£:■.  A,?0) 

Case: 


V  = 


Then 


Axiom 

By  weakenings  {W\  and  W?)  from  I. 


Vx 

$;ra  ^A,Ai;0 


V-i 

«';ri  -^B,A2;0 


^ ; Ti, r2  — ¥  A®B,  Ai,  A2;  0 


■®R. 


Si  ::  (!^',ri  =>  A,Ai,?0) 

£2  ::  (!^',r2=>  H,A2,?0) 

£'  ::  (!«',!«',  ri,r2  ^  A  ®  B,  Ai,  A2,?0,?0) 
£  ::  (l^',  Li,  r2  A  0  B,  Ai,  A2, ?0) 


By  ind.  hyp.  on  T>i 
By  ind.  hyp.  on  V2 
By  0B  from  £\  and  £2 
By  contractions  (C!  and  C?)  from  £' 


Case: 


Then 


V  = 


Vi 

(«',A);r,A— >  A;0 

- !B. 

(«',A);r— >A;0 


£,  (I^-JA.RA^^  A,?0) 

£[  ::  (!^,!A,r,!A^  A,?0) 
£  ::  (!5',!A,r=»  A,?0) 


By  ind.  hyp.  on  Vi 
By  IL  from  £i 
By  contraction  (C!)  from  £[ 


Completeness  of  LV.  The  proof  of  this  direction  proceeds  by  induction  on  the  structure  of 
£  (!^r,r  =>  A,?0).  Recall  that  L  may  not  contain  a  formula  of  the  form  !A,  and  A  may  not 

contain  a  formula  of  the  form  ?A.  We  have  to  construct  a  P  ::  L  — ¥  A;  0).  We  only  show  a 

few  cases;  the  others  are  similar. 

Case: 

^  -  A  =»  A 


There  are  three  subcases,  depending  on  whether  the  principal  connective  of  A  is 
neither.  We  show  the  case  where  A  =  !A'.  We  construct 


V  = 


I 

D\ 

\R 


I 


or 


to  satisfy  the  requirement  of  the  theorem. 
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Case: 

£i  £2 

^  A,Ai,?0i  !$2,r2  5,A2,?02 

- — - 0E. 

!«r2,  Li,  T2^A®B,  Ai,  A2,  ?01,  ?02 

Then  there  are  four  similar  subcases,  depending  on  whether  A  and  B  are  of  the  form  ?A'  and 
?B',  respectively.  Assume  that  A  =  ?A'  and  B  -  ?B';  the  remaining  subcases  are  similar, 
then 


Pi::(«'i;ri^Ai;(A',0i)) 

V[::  («r,;ri^A,Ai;0i) 

V'{::  A,Ai;0i,02) 

V'::  {^,,^2]T2—^B,A2-,QuQ2) 

V  ::  ('®i,^2;ri,r2  — >  A®S,Ai,A2;0i,02) 


By  ind.  hyp.  on  £i 
By  ?i?  from  Vi 
By  weakenings  WL  (Lemma  1)  from  V'^ 

Similarly  from  £2 
By  ®R  from  V"  and  T>2. 

a 


We  could  prove  admissibility  of  the  cut  rules  in  LV  simulteneously  by  three  nested  inductions 
on  the  complexity  of  the  cut  formula,  the  length  of  the  left  derivation  of  the  left  premise  and  the 
length  of  the  derivation  of  the  right  premise.  The  rule  Cut  would  be  considered  smaller  that  Cut! 
and  Cut?  when  the  cut  formula  itself  does  not  change.  However,  for  the  purpose  of  implementation 
we  would  like  the  proof  to  be  structural.  To  this  end  we  introduce  proof  terms  to  label  derivations 
in  the  next  section. 


4  Linear  Proof  Terms 


In  this  section  we  introduce  proof  terms  so  that  the  required  weakening  for  formulas  in  the  non¬ 
linear  zones  does  not  destroy  the  structural  induction  and  to  resolve  ambiguities  in  the  informal 
presentation  (the  formula  labels  track  occurrences).  It  is  helpful  to  think  of  proof  terms  as  part  of 
a  linear  X-calculus.  For  our  purposes,  proof  terms  for  the  Lolli  fragment  of  linear  logic  [HM94]  are 
sufficient,  which  is  important  since  it  satisfies  a  stronger  normal  form  theorem  than  the  full  calculus. 
In  this  fragment,  we  have  linear  (—0)  and  intuitionistic  (— >)  implication,  additive  conjunction  (&), 
top  (T)  and  corresponding  proof  constructors.  Note  that  we  define  a  calculus  of  natural  deduction 
rather  than  a  sequent  calculus. 


Linear  Types  A 
Linear  Terms  M 


P  I  Ai  —0A2  I  A1&A2  I  T  I  Ai  — )■  A2 

c  I  X 

I  Xx:A.  M  I  Ml  M2 
I  {Mu  M2)  I  ttiM  1  7r2M 
10 

I  X"x:A.  M  I  Ml  •  M2 


for  Ai  — o  A2 
for  A1&A2 
for  T 

for  Ai  — ^  A2 


We  do  not  formally  define  this  calculus  here  since  it  would  lead  us  too  far  afield.  Endowing  a 
sequent  derivation  with  a  linear  proof  term,  however,  is  suggestive  for  an  encoding  of  LV  in  a  linear 
logical  framework  that  is  more  concise  than  the  one  we  present  here.  We  return  to  this  issue  in 
Section  8. 
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The  proof  terms  must  refer  to  the  hypotheses  and  conclusions  in  a  sequent  in  a  unique  way. 
We  therefore  label  each  formula  in  each  zone.  The  proof  term  annotates  the  whole  sequent,  and, 
for  lack  of  a  better  place,  we  write  it  above  the  sequent  arrow. 

li, .  ..,nf.Aj)- (ni:5i, .  ...nk'.Bk)  A  (piA, . .  .,p;:Q);  {pf-Du  ■ 


We  systematically  introduce  exactly  one  proof  term  constructor  for  each  inference  rule  and  give  it 
a  mnemonic  name.  This  avoids  confusion  with  different  proof  term  assignments  from  the  literature 
(e.g.  [Abr93]).  The  purpose  of  the  proof  terms  here  is  not  immediately  computational — they  record 
enough  information  about  the  structure  of  the  proof  that  it  may  be  reconstructed  up  to  insertion 
or  removal  of  some  unused  hypotheses  or  conclusions. 


Axioms. 


-  A  axiom  np  .  ^ 

^■,n:A  — y  p:A-,Q 


Multiplicative  Connectives. 


W;ri^Pi:A,Ai;0  Fz  ^  P2:R,  A2;  0 

iTr.r  r  timesr(Api:A.  d2)p  .  A 

w;ri,r2  — y  p:A0  j3,Ai,A2;0 


■®R 


r,  ni’A,  712:8  — y  A;  0 


r,  n:A  0  B A;  0 


■0X 


IB 


^;r-^A;0 
$;r,n;l  A;0 


■li 


Additive  Connectives. 


^;rApi:A,A;0  ^;rAp2:B,A;0 

andr((Ap,:A.^(Ap2:B.  q 


■  8>i.R 


A;0 


r,  n-.A&B  A;  0 

^;r,n2:B  A;0 

^;r,n:A&B  (a^b.  <^2)  n  ^ 


■  &il 


•  &i2 


^:r 


topr()p 


■TB 


p:T,A;0 


No  T L  rule 


Involution. 


^;r,n:A 


A;0 


^;rPe^P^(-^'"‘^)PpM\A;0 


-R 


^;r-4p:A,A;0 

^;r,n:A^  perpl(^A.  d)n  ^ 


li 


10 


STRUCTURAL  CUT  ELIMINATION  IN  LINEAR  LOGIC 


Quantification. 


j)i:[a/x]A,  A;0 


-VR" 


’Ir;r,ni:[t/a;]A-^- A;e 


-VL 


’i' 


foraIlr(Aa:i.  Api:[a/x]A.  d]p  A;  0  L,  n:Vx.  A  "  A;  0 


Exponentials. 


-^Pi:A;0 
^  !r-(Ap^. 


■\R 


(^,n“:A);r  A  A;0 


■\L 


«r;(r,n:!A) 


!1(A  n“:A.  d)n  q 


$;r^A;(p“:A,0) 


■?R 


^;r 


■^(a“C2^‘')P(p:?A,A);0 


’f;ni:A  •;0 

?I-(Ani:.4.  d)  n 

^:n:7A  — )■  •;© 


-7L 


Structural  Rules. 


(^,n":A);(r,n:A) -A  A;0  (p:A,  A);  0) 


■\D 


A;© 


?jD 


?d(Ap:A.  <i)-p“ 


A;(A,0) 


A  sequent  derivation  does  not  uniquely  determine  its  proof  term,  nor  does  a  proof  term  uniquely 
determine  a  derivation.  The  first  phenomenon  arises  since  sequent  derivations  without  proof  terms 
do  not  track  occurrences.  For  example, 

(A,  A);  A  >  A;  ■ 

(A,A);  -  — >  A;- 

when  annotated  as 

«:A,n^:A);-^p:A;- 

would  be  well  formed  with  either 

d  =  !d  (An:A.  axiomnp)  •  «! ,  or 
d  =  !d  (An; A.  axiom  np)  •  n^, 

depending  on  whether  the  first  or  the  second  non-linear  occurrence  of  A  is  copied  to  the  linear  zone. 
For  the  meta-theory  of  sequent  calculi  it  is  often  assumed  that  we  can  “track  occurrences  —proof 
terms  provide  a  principled  way  to  achieve  this,  since  different  occurrences  of  formulas  have  distinct 

In  the  other  direction,  a  linear  proof  term  does  not  uniquely  determine  its  derivation.  The  first 
source  of  ambiguity  already  arises  in  the  classical  calculus:  Adjoining  modal  hypotheses  or  modal 
conclusions  to  a  derivation  does  not  change  the  structure  of  its  proof  term.  This  is  desirable,  since 
it  permits  a  proof  of  cut  elimination  by  structural  induction  on  the  proof  terms. 
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The  second  ambiguity  is  due  to  the  additive  nature  of  T.  Consider  the  two  derivations 


T 


■TR 


T 


■TR 


T 


TR 


T 


■TR 


A  T(g)T 
The  proof  term  d  for  the  annotated  sequent 


-®R 


T®T 


■0R 


n:A  — )■  p:T  0  T 


in  both  cases  is 

timesr (Api:T.  topr  ( ) pi)  (Ap2:T.  topr () P2) P 

Other  hypotheses  besides  A  are  also  permitted  and  could  be  split  in  different  ways  at  the  0R 
inference  without  affecting  the  proof  term.  Since  proof  terms  forget  information,  it  seems  inevitable 
that  our  LF  representation  based  on  the  proof  terms  above  will  not  be  adequate.  The  solution  is  to 
introduce  a  higher-level  judgment  that  the  representing  terms  are  indeed  well  formed  linear  terms. 
The  derivations  that  establish  linearity  of  proof  terms  are  then  isomorphic  to  sequent  derivations. 

Despite  these  difficulties,  we  have  the  following  properties  of  proof  terms.  Here  we  write  V,  v:A 
for  the  result  of  adjoining  v:A  to  the  appropriate  non-linear  zone  in  every  sequent  in  V.  Note  that 
the  proof  term  does  not  change  when  we  adjoin  a  formula. 

Lemma  3  (Basic  Properties  of  Proof  Terms) 

1.  (WL)  If  V  ::  ^  A;0)  then  {V,n‘^:A)  ::  ((«’,  E  A  A;0). 

g.  (WR;  IfV  ::  ($;r  A;0)  then  (R,p‘^;A)  ::  A;  (p‘^:A,  0)). 

Proof:  In  each  case  by  a  straightforward  induction  on  the  structure  of  V.  □ 

Of  course,  weakening  in  the  linear  zones  of  a  sequent  is  not  valid  in  general. 


5  Representation  in  LF 

In  this  section  we  develop  the  representation  of  linear  sequent  derivations  in  LF  as  implemented  in 
Elf.  We  proceed  in  three  stages.  In  the  first  stage  we  represent  the  formulas  of  linear  logic  using  the 
standard  technique  of  higher-order  abstract  syntax  (see  [HHP93]).  In  the  second  stage  we  encode 
proof  terms  for  the  sequent  calculus  without  regard  to  linearity  constraints  as  in  [Pfe94].  In  the 
third  stage  we  encode  the  linearity  requirements  as  a  higher-level  judgment  on  proof  terms.  This 
third  stage  yields  an  adequate  representation. 

5.1  Formulas 

The  representation  of  formulas  using  higher-order  abstract  syntax  is  straightforward.  The  main 
idea  is  to  represent  object-level  variables  and  parameters  by  meta-level  variables.  Also,  we  do  not 
commit  to  any  particular  domain  of  individuals,  so  only  variables  are  built-in.  One  can  encode 
constants  or  function  symbols  by  declaring  new  LF  constants  of  appropriate  type  i  ->  ...  ->  i 
and  predicate  symbols  by  declaring  new  LF  constants  of  type  i  ->  ...  ->  o.  We  only  show 
the  Elf  declarations  below.  An  explicit  definition  of  the  representation  of  A,  ^A'',  may  be  easily 
constructed  from  this  signature.  For  example,  ’’A-'-’’  =  perp^A''  Note  that  we  use  readable  infix 
notation  for  0  and  &  which  are  considered  right  associative. 
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i  :  type.  */,  individuals 
0  :  type.  '/,  formulas 

V.  Multiplicative  connectives 

times  :  o  ->  o  ->  o.  ‘/.infix  right  11  times 

one  :  o . 


'/,  Additive  connectives 

and  :  o  ->  o  ->  o.  '/.infix  right  11  and 

top  :  o. 

'/.  Involution 
perp  :  o  ->  o. 

*/.  Quantifier 

forall  :  (i  ->  o)  ->  o. 

*/.  Exponentials 
!  :  o  ->  o . 

?  :  o  ->  o. 

For  example,  ’"ix.  {Ax&{B  would  be 
(forall  [x:i]  Ax  and  perp  (B  x))  :  o. 
in  a  context  where  A:i  ->  o  and  B:i  ->  o. 


5.2  Proof  Terms 

The  proof  terms  of  the  annotated  sequent  calculus  are  transcribed  into  LF,  interpreting  both  A  and 
A“  as  meta-level  abstraction,  and  both  juxtaposition  and  •  as  meta-level  application.  We  use  four 
distinct  type  families,  neg!,  neg,  pos,  and  pos?  to  distinguish  exponential  and  linear  hypotheses 
and  conclusions. 


#  :  type . 
neg ! :  o  ->  type . 
neg  :  o  ->  type, 
pos  :  o  ->  type, 
pos?:  o  ->  type. 


'/.  Token  (for  derivations) 

*/.  Modal  Hypotheses  (far  left) 

*/.  Hypotheses  (left) 

*/.  Conclusions  (right) 

*/.  Modal  Conclusions  (far  right). 


axiom  :  (neg  A  ->  pos  A  ->  #) . 

timesr  :  (pos  A  ->  #) 

->  (pos  B  ->  #) 

->  (pos  (A  times  B)  ->  #) . 

oner  :  (pos  one  ->  #) . 


andr  :  (pos  A  ->  #)  ->  (pos  B  ->  #) 
->  (pos  (A  and  B)  ->  #) . 


timesl  :  (neg  A  ->  neg  B  ->  #) 

->  (neg  (A  times  B)  ->  #) . 


onel  :  #  ->  (neg  one  ->  #) . 

andll  :  (neg  A  ->  #) 

->  (neg  (A  and  B)  ->  #) . 
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andl2  :  (neg  B  ->  #) 

->  (neg  (A  and  B)  ->  #) . 


topr  :  (pos  (top)  ->  #) . 

perpr  :  (neg  A  ->  #) 

->  (pos  (perp  A)  ->  #) . 

forallr  ;  ({a:!!  pos  (A  a)  ->  #) 

->  (pos  (forall  A)  ->  #) . 

!r  ;  (pos  A  ->  #) 

->  (pos  ( !  A)  ->  #) . 

?r  ;  (pos?  A  ->  #) 

->  (pos  (?  A)  ->  #) . 


!d  :  (neg  A  ->  #) 

->  (neg !  A  ->  #) . 


no  topi 

perpl  :  (pos  A  ->  #) 

->  (neg  (perp  A)  ->  #) . 

foralll  :  {T:i}  (neg  (A  T)  ->  #) 

->  (neg  (forall  A)  ->  #) . 

!1  ;  (neg!  A  ->  #) 

->  (neg  (I  A)  ->  #) . 

?1  :  (neg  A  ->  #) 

->  (neg  (?  A)  ->  #) . 


?d  :  (pos  A  ->  #) 

->  (pos?  A  ->  #) . 


The  obvious  representation  function  ^d''  for  proof  terms  can  be  extracted  from  this  signature. 
As  an  example  we  give  a  derivation  of  A  0  B  — >  B  ®  A  and  its  representation  in  Elf. 


B 


A,B^B®A 
A®B  — >B®A 


-I 

A 

—  ®R 
®L 


If  we  label  the  sequent  n:A  ®  B  p:B  ®  A  then  the  proof  term  d  would  be 

timesl  {Xni'.A.  Xn2:B.  timesr  {Xp2-B.  axiom n2P2)  [Xpp.A.  axiom  nipi)p)  n. 

Its  representation  in  Elf  is  the  object  below.  Note  that  we  abstract  over  A  and  B  to  express  that 
the  derivation  is  parametric  in  A  and  B. 


(  [A :  o]  [B  :  o] 

[n:neg  (A  times  B)] 

Cp;pos  (B  times  A)] 

timesl  ([nl:neg  A]  [n2:neg  B] 

timesr  ([p2:pos  B]  axiom  n2  p2) 
(Cpl:pos  A]  axiom  nl  pi) 

P) 


{A ; ol  {B : ol 

neg  (A  times  B) 

->  pos  (B  times  A) 
->  #. 
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The  representation  of  the  derivation 


A 


T 


■TE 


B 


T 


A,B 


T<8)T 


■TE 

-(8>E 


A®B 


TOT 


■®L 


is  the  term 

(  [A :  o]  [B :  o] 

[n:neg  (A  times  B)] 

[p:pos  (top  times  top)] 
timesl  ([nl:neg  A]  [n2:neg  B] 

timesr  (Cplipos  top]  topr  pi) 
([p2:pos  top]  topr  p2) 

P) 


{A:o>  {B:o> 

neg  (A  times  B) 

->  pos  (top  times  top) 
->  #. 


which  is  ambiguous.  For  example,  it  is  also  the  proof  term  for 


A,B 


T 


TE 


T 


A,  B  — >  T  (g)  T 

- OL 

A®  B  — ^  TOT 


TE 

<SiE 


This  ambiguity  is  resolved  in  the  check  of  linearity  constraints  discussed  below. 


5.3  Linearity  Constraints 

Third,  the  representation  of  the  linearity  constraints.  We  need  to  check  that  certain  meta-level 
functions  occurring  in  proof  terms  are  linear  in  their  argument.  Due  to  typing  considerations  and 
the  absence  of  polymorphism  in  LF,  we  need  two  judgments  to  represent  linearity: 

linp  :  (pos  A  ->  #)  ->  type, 
linn  :  (neg  A  ->  #)  ->  type. 

We  also  require  a  judgment  enforcing  that  each  function  occurring  embedded  in  a  proof  term 
satisfies  the  appropriate  linearity  constraints. 

lin  :  #  ->  type. 

We  show  here  only  parts  of  the  implementations  of  these  type  families;  the  complete  code  may 
be  found  in  Appendix  A.3.  Because  we  intend  the  type  families  to  be  used  operationally  in  the 
Elf  meta-language  to  determine  if  a  given  proof  term  representation  is  indeed  linearly  valid,  we  use 
notation  A  <-  B  <-  C  for  C  ->  B  ->  A.  The  operational  interpretation  reads:  “To  solve  a  goal  of 
the  form  A,  first  solve  B  and  then  C”.  First,  some  cases  for  linp. 


5  REPRESENTATION  IN  LF 
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Axiom.  An  axiom  is  linear  in  the  positive  formula  participating  in  it. 
linp_axiom  :  linp  ( [p]  axiom  N  p) . 

Tensor.  An  application  of  is  linear  in  a  positive  formula  p:A  if  (1)  p  labels  the  principal 
formula  of  the  inference  and  p  does  not  occur  in  either  premise, 

linp_timesr_0  :  linp  ( [p]  timesr  D1  D2  p) . 

(2)  p  labels  a  side  formula  of  the  inference  and  p  occurs  linearly  in  the  left  premise  and  not  at  all 
in  the  right  premise, 

linp_timesr_l  :  linp  ( Cp]  timesr  (D1  p)  D2  P) 

<-  ({pi}  linp  ([p]  D1  p  pD). 

(3)  p  labels  a  side  formula  of  the  inference  and  p  occurs  linearly  in  the  right  premise  and  not  at  all 
the  left  premise 

linp_timesr_2  ;  linp  ( [p]  timesr  D1  (D2  p)  P) 

<-  ({p2}  linp  ([p]  D2  p  p2)). 

Note  how  the  multiplicative  nature  of  the  tensor  is  encoded  in  these  three  inference  rules.  Note 
also  how  the  variable  hygiene  of  the  meta-language  captures  occurrence  conditions.  The  (implicit) 
quantifiers  for  Dl,  D2,  and  P  are  on  the  outside  and  thus,  for  example,  in  the  last  rule  D1  may  not 
depend  on  p,  while  D2  may,  since  we  permit  dependence  by  writing  (D2  p).  Similarly,  the  principal 
formula  P  cannot  be  p.  The  left  rule  for  tensor  is  simpler:  p  cannot  label  the  principal  formula, 
since  p  is  positive  and  the  principal  formula  is  negative.  We  therefore  have  only  one  case. 

linp_timesl  :  linp  ( [p]  timesl  (Dl  p)  N) 

<-  ({nl}  ■Cn2}  linp  ([p]  Dl  p  nl  n2)). 

Multiplicative  Unit.  This  behaves  like  a  0-ary  tensor. 
linp_oner_0  :  linp  ( [p]  oner  p) . 

linp_onel  :  linp  ( [p]  onel  (Dl  p)  N) 

<-  linp  (Cp]  Dl  p) . 

Additive  Conjunction.  An  application  of  &R  is  linear  in  a  positive  formula  p:A  if  (1)  p  labels 
the  principal  formula  of  the  inference  and  p  does  not  occur  in  either  premise, 

linp_andr_0  :  linp  ( Cp]  andr  Dl  D2  p) . 

(2)  p  labels  a  side  formula  of  the  inference  and  p  occurs  linearly  in  both  premises 

linp.andr  :  linp  ( Cp]  andr  (Dl  p)  (D2  p)  P) 

<-  ({pi}  linp  (Cp]  Dl  P  pD) 

<-  ({p2}  linp  (Cp]  D2  p  p2)). 
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This  encodes  the  additive  nature  of  the  &.  connective.  There  are  two  left  rules  for  &.  In  each 
case,  p  cannot  be  the  principal  formula  (which  is  negative)  and  must  therefore  occur  linearly  in  the 
premise: 

linp_andll  :  linp  ( [p]  andll  (D1  p)  N) 

<-  ({nl}  linp  ([p]  D1  p  nl)). 

Iinp_andl2  :  linp  ( [p]  andl2  (D2  p)  N) 

<-  (-Cn2}  linp  ([p]  D2  p  n2)). 

Additive  Unit.  The  additive  unit  T  behaves  like  a  0-ary  additive  conjunction. 
linp_topr_0  :  linp  ( [p]  topr  p) . 

linp_topr  :  linp  ( [p]  topr  P) . 

Involution.  The  involutive  negation  is  straightforward. 

Iinp_perpr_0  :  linp  ( [p]  perpr  D1  p) . 

linp_perpr  :  linp  ([p]  perpr  (D1  p)  P) 

<-  ({nl}  linp  (Cp]  D1  p  nl)). 

linp_perpl  :  linp  ([p]  perpl  (D1  p)  N) 

<-  ({pl>  linp  ([p]  D1  p  pD). 

Universal  Quantification.  The  universal  quantifier  does  not  introduce  any  new  ideas:  a  formula 
occurrence  is  either  principal  or  occurs  linearly  in  the  premise. 

linp_f orallr_0  :  linp  ( [p]  forallr  D1  p) . 

linp_forallr  :  linp  ( [p]  forallr  (D1  p)  P) 

<-  ({a}  {pi}  linp  ([p]  D1  p  a  pi)). 

linp_foralll  :  linp  ([p]  foralll  T  (D1  p)  N) 

<-  ({nl}  linp  (Cp]  D1  p  nl)). 


Exponentials.  The  modal  operator  !  introduces  some  new  considerations,  since  we  must  mediate 
between  modal  and  linear  hypotheses  and  conclusions.  We  repeat  the  inference  rules. 


(^,n‘^:A);r  A;© 


n:\A)  A;0 


The  \R  rule  is  constrained  to  have  empty  linear  zones,  that  is,  no  linear  side  formulas  are  permitted. 
Thus  an  deduction  ending  in  IR  is  linear  in  a  positive  formula  p  only  if  p  labels  the  principal  formula 
of  the  inference  (it  cannot  occur  as  a  side  formula). 


linp_!r_0  :  linp  ( [p]  !r  D1  p) . 

In  the  left  rule  we  have  no  such  restriction.  Since  p  is  positive,  it  must  label  a  side  formula. 

linp_!l  :  linp  (Cp]  !1  (Dl!  p)  K) 

<-  ({nl!}  linp  (Cp]  Dl!  p  nl!)). 

Note  that  nl ! ,  the  newly  introduced  negative  formula,  falls  into  the  modal  zone,  but  this  becomes 
important  only  later  when  we  check  linearity  of  subterms  where  required.  For  similar  reasons,  the 
structural  rule  for  the  exponential  !  is  simple. 

linp_!d  :  linp  (Cp]  !d  (Dl  p)  N!) 

<-  ({nl}  linp  (Cp]  Dl  p  nl)). 

Analogous  considerations  for  the  ?  operator  lead  to  the  following  three  rules. 
linp_?r_0  :  linp  ( Cp]  ?r  Dl  p) . 

linp_?r  ;  linp  ( Cp]  (Dl?  p)  P) 

<-  ({pi?}  linp  (Cp]  Dl?  p  pi?)). 

'/.  no  linp_?l_0:  p  is  positive 

'/.  no  linp_?l:  p  may  not  occur  in  Dl 

linp_?d  :  linp  (Cp]  ?d  (Dl  p)  P?) 

<-  ({pi}  linp  ([p]  Dl  p  pD). 

Note  that  p  may  not  be  the  principal  formula  of  a  dereliction,  which  must  originate  from  the 
positive  modal  zone. 

We  skip  the  dual  rules  for  linearity  of  functions  in  negative  formulas.  We  still  have  to  define 
the  type  family  lin,  encoding  the  constraint  that  every  linear  hypothesis  or  conclusion  that  is 
introduced  into  a  derivation  is  indeed  used  linearly.  There  is  exactly  one  declaration  for  lin  for 
each  inference  rule. 

Axiom.  There  are  no  subderivations,  so  any  use  of  an  axiom  is  considered  linear.  The  con¬ 
straint  that  there  be  no  linear  side  formulas  is  enforced  collectively  by  checking  all  hypotheses  and 
conclusions  wherever  they  are  introduced. 

lin_axiom  :  lin  (axiom  N  P) . 

Tensor.  Recall  the  right  rule; 

Fi  A  Pi-A,  Ai;  0  Fz  A  P2:B,  A2;  0 

^ ;  Fi ,  r2  0  B,  Ai,  A2;  0 

We  have  to  check  that  (1)  the  derivation  di  of  the  left  premise  is  linear  in  pi,  (2)  the  derivation  ^2 
of  the  right  premise  is  linear  in  p2,  (3)  all  subderivations  of  the  left  premise  are  linear,  and  (4)  all 
subderivations  of  the  right  premise  are  linear.  That  is; 
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lin_timesr  ;  lin  (timesr  D1  D2  P) 

<-  linp  D1 
<-  linp  D2 

<-  ({pl>  lin  (D1  pD) 

<-  ({p2}  lin  (D2  p2)). 

Recall  the  left  rule: 

«r;r,ni:A,n2:B  A  A;e 

- ®L 

r,  n:A  ®  B  (An. d.)n  ^ 

We  have  to  check  that  (1)  the  derivation  di  is  linear  in  (2)  the  derivation  di  is  linear  in  7i2)  and 
(3)  all  subderivations  of  di  are  linear. 

lin_timesl  :  lin  (timesl  DI  N) 

<-  ({n2}  linn  ([nl]  DI  nl  n2)) 

<-  ({nl}  linn  ( [n2]  DI  nl  n2)) 

<-  ({nl}  {n2}  lin  (DI  nl  n2)). 

The  other  multiplicative  and  additive  connectives  and  the  quantifiers  are  congruences  in  a 
similar  style.  They  are  given  in  Appendix  A. 3. 


Exponentials.  Recall  the  left  and  right  rules  for  the  !  modality: 


A, 


Pi:A;e 


\R 


A  A;0 
^;(r,n:!A)  A;  © 


\L 


To  check  that  an  application  of  IR  is  linear,  we  need  to  check  (1)  that  the  derivation  di  of  the 
premise  is  linear  in  pi,  and  (2)  that  all  subderivations  of  the  premise  are  linear.  The  condition  that 
there  may  be  no  linear  side  formulas  is  encoded  in  the  linp  and  linn  families. 

lin_!r  :  lin  (!r  DI  P) 

<-  linp  DI 

<-  ({pi}  lin  (DI  pD) . 

In  the  IL  rule,  the  newly  introduced  hypothesis  n'^iA  is  modal  and  therefore  does  not  need  to 
satisfy  any  linearity  constraints.  For  example,  it  may  occur  as  a  side  formula  to  other  applications 
of  \R.  That  is,  we  only  need  to  check  that  all  subderivations  of  the  premise  are  again  linear. 

lin_!l  :  lin  (!1  DI!  N) 

<-  ({nil}  lin  (Dll  nl!)). 


Dereliction  introduces  a  new  linear  hypothesis  which  must  thus  be  checked,  together  with  the 
linearity  of  all  further  subderivations. 

:  lin  (Id  DI  N!) 

<-  linn  DI 

<-  ({nl}  lin  (DI  nl)). 


lin_  I  d 
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The  cases  for  the  ?  modality  are  dual. 

lin_?r  ;  lin  (?r  Dl?  P) 

<-  ({pl?>  lin  (Dl?  pi?)). 

lin_?l  :  lin  (?1  Dl  N) 

<-  linn  Dl 

<-  ({nl}  lin  (Dl  nl)). 

lin_?d  :  lin  (?d  Dl  P?) 

<-  linp  Dl 

<-  ({pl>  lin  (Dl  pD). 

At  the  top-level  we  must  check  that  the  derivation  is  linear  in  each  linear  hypothesis  or  conclu¬ 
sion,  and  also  that  every  subderivation  is  linear.  A  common  case  is  one  where  we  have  one  linear 
hypothesis  and  one  linear  conclusion,  represented  by  the  type  neg  A  ->  pos  B  ->  #.  To  check  a 
proof  term  for  validity  we  may  use  the  following  auxiliary  judgment. 

Iin2  :  (neg  B  ->  pos  C  ->  #)  ->  type. 

Iin2_all  :  lin2  D 

<-  (-[p]-  linn  ([n]  D  n  p))  7,  linear  in  n 
<-  ({n>  linp  (Cp]  D  n  p))  7,  linear  in  p 
<-  ({n}  -Cp}  lin  (D  n  p)).  7.  subderivations  are  all  linear 

The  adequacy  theorem  for  our  representation  is  tedious,  but  we  include  some  details  since  it 
may  be  instructive.  We  fix  the  signature  S  to  the  one  consistin^^of  all  declarations  summarized 
in  Appendices  A.1-A.3  (after  type  reconstruction)  and  write  GV-  Mfl-AifMisa  canonical  LF 
object  of  type  A  in  context  G.  Assume  we  have  sequent  derivation  ending  in 

A  A;0. 

For  each  hypothesis  or  conclusion  we  introduce  a  typing  assumption  in  LF,  where  the  zones  are 
distinguished  by  four  type  families,  neg!,  neg,  pos,  and  pos?. 


= 

^nX'.Au.. 

.,nf.A,-' 

=  n":neg!'"Ai'', . 

. .,  n^;neg!'‘Aj'^ 

rn  = 

..nk'.Bk'' 

=  ni;neg''Rr,., 

...Uk'.nQg^Bk'' 

II 

r 

< 

L 

..,pi:Gr 

=  Pi:pos''C'r, . 

...pppos^Cr 

^0^  = 

^pT-Du.. 

■ )  P'm  -^rrG 

=  p^:pos?''Z)i‘', . . 

We  ambiguously  apply  to  T,  A,  and  0,  since  it  is  always  clear  in  which  zone  the  hypotheses 
or  conclusions  originate.  We  then  have  the  theorem  that  the  representation  of  every  derivation 
is  well- typed  and  canonical  in  the  LF  context  which  arises  from  translating  the  hypotheses  and 
conclusions  as  defined  above. 

Lemma  4  (Soundness  of  Representation)  Let  V  ::  (^;r  A;0)  he  a  sequent  derivation 

with  parameters  among  a\^ ah-  Then 

1.  ai:i,...,a;,:i,^'TT^rT^AT^0^1-^"’ 
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2.  there  exists  an  M  such  that 

LF 

ai:i, . .  H  M  ^ 

3.  for  each  n,:neg''5i'',  1  <  *  <  there  exists  an  Ni  such  that 

ai  :i, . . . ,  M'",  '"AT  ''0'’  E  iV^  1]-  linn  {Xn^-neg^ Bi^ .  ''d?) 

4-  for  each  pi'.pos^Ci'^,  1  <i  <l  in  ''A''  there  exists  a  Pi  such  that 

ai;i, . .  .,a;^:i,'"^^'’,''r'',''A‘’,''0''l-^^  Pi  t  linp  (Ap^rpos '"Cr.  ^d'') 

Proof:  By  induction  on  the  structure  of  V.  O 

In  the  other  direction  (the  more  difficult  one)  we  have  to  show  that  every  well- typed,  canonical 
LF  object  satisfying  conditions  (l)-(4)  above  is  the  representation  of  a  linear  sequent  derivation. 

Lemma  5  (Completeness  of  Representation)  Let  G  be  an  LF  context  of  the  form 

as  defined  above.  If 

1. 

2.  G\^^  M^linD, 

3.  G\-  Ni  fl  linn  (AnjCneg'^Bi''.  D)  for  I  <i  <k,  and 
4-  G  \-^  Pi  it  linp  (Api:pos''Ci"'.  D)  for  1  <i  <1, 

then  there  exist  a  proof  term  d  and  a  derivation  V  ::  ($;  T  A;  0)  such  that  ''d~'  =  D. 

Proof:  By  induction  on  the  structure  of  the  derivation  C  ::  {G  h  D  fl  #),  applying  inversion  on 
the  derivations  postulated  by  items  (2)-(4).  It  is  crucial  that  D,  M,  Ni  and  Pi  be  in  canonical 
form. 

Soundness  and  completeness  are  the  crucial  lemmas  for  adequacy  of  the  representation,  since 
it  can  be  easily  checked  that  it  is  a  bijection.  Com  positionality  is  guaranteed  by  construction  since 
we  represented  object-level  variables  by  meta-level  variables. 

Theorem  6  (Adequacy  of  Representation)  There  exists  a  bijection  between  linear  sequent 
derivations  of 

V 

A  A;0 

in  the  system  LV  and  canonical  LF  objects  of  type  lin''cf'  satisfying  conditions  (2)-(4)  in  an 
appropriate  context  as  stated  in  Lemmas  4  and  5.  The  bijection  is  compositional  in  the  sense  that 


^[t/a]V^  =  [^V/afV^  and  ^[ni/n2]V^  =  and  ''[pi/p2]V''  =  \p\/V2YV^ 
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While  this  is  a  very  complex  statement,  it  is  actually  quite  easy  to  use.  The  complexity  is  mostly 
due  to  the  fact  that  we  have  to  admit  an  undetermined  number  of  hypothesis  and  conclusions  in 
its  formulation.  We  can  specialize  it  to  the  case  where  we  have  no  linear  hypotheses  or  conclusions 
(at  the  end  sequent),  or  to  the  case  where  we  have  precisely  one  linear  hypotheses  and  conclusion. 
For  example,  if  we  declare 

lin2  :  (neg  B  ->  pos  C  ->  #)  ->  type. 

Iin2_all  :  lin2  D 

<-  ({p}  linn  ([n]  D  n  p)) 

<-  ({n}  linp  ([p]  D  n  p)) 

<-  ({n}  {p>  lin  (D  n  p)). 

then  we  can  easily  show,  using  Theorem  6: 

Corollary  7  There  is  a  compositional  bijection  between  linear  sequent  derivations  of 

V 

-^C;e 

with  parameters  among  a^, . . . ,  a^  in  the  system  TV  and  canonical  LF  objects  M  such  that 

ai:i, .  M  fl-  lin2  (Arameg’’^''.  Ap:pos'‘C.  ^d''). 

We  now  return  to  an  earlier  example,  checking  that  the  given  proof  term  actually  represents  a 
derivation  oi  A®B  — >  B®A.  To  this  end  we  check  via  an  Elf  query  that  it  satisfies  lin2.  Elf  here 
is  used  as  a  constraint  logic  programming  language,  searching  for  a  closed  instance  of  the  query. 
This  search  is  incomplete  (depth-first,  left-to-right  subgoal  selection),  but  linn,  linp,  and  lin  are 
all  operationally  adequate  and  not  merely  a  declarative  description  of  the  concepts  of  linearity. 
The  answer  substitution  for  L  below  can  be  considered  the  representation  of  the  sequent  derivation 
according  to  Corollary  7. 

?-  L  : 

{A:o}  {B:o} 
lin2 

([n:neg  (A  times  B)] 

[p:pos  (B  times  A)] 

timesl  ([nl:neg  A]  [n2:neg  B] 

timesr  (Cp2:pos  B]  axiom  n2  p2) 

([pi: pos  A]  axiom  nl  pi) 

P) 

n)  . 

Solving. . . 

L  = 

[A :  o]  [B :  o] 
lin2_all 

([n:neg  (A  times  B)]  [p:pos  (B  times  A)] 
lin_timesl 

(Cnlineg  A]  [n2:neg  B] 


'/  linear  in  n 
7,  linear  in  p 

7.  subderivations  are  all  linear 
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lin_timesr  ([p2;pos  A]  lin_ axiom)  ([pl:pos  B]  lin_axiom) 
linp_axiom  linp_axiom) 

(Cnlrneg  A]  liiin_timesr_l  [pl:pos  B]  linn_axiom) 

(Cn2:neg  B]  linn_timesr_2  [p2:pos  A]  linn.axiom)) 

([n:neg  (A  times  B)]  linp.timesl  [nl:neg  A]  Cn2:neg  B]  linp_timesr_0) 

([p:pos  (B  times  A)]  linn_timesl_0) . 

The  following  is  an  incorrect  derivation:  It  violates  the  multiplicative  nature  of  the  tensor  and 
the  side  conditions  on  axioms.  _ _ ^  _ _ _ _ j 

A,B-^B  A,B—^A 

- 

A®B  —^B  A®B  — A 

- - - - ®R 

A®B  — >  B®A 

A  proof  term  for  this  derivation  may  still  be  written  down: 

(  [A ;  o]  [B ;  o] 

[n:neg  (A  times  B)] 

[p:pos  (B  times  A)]  ,  .  „  os  ^ 

timesr  (Cp2:pos  B]  timesl  ([nl:neg  A]  [n2;neg  B]  axiom  n2  p2)  n) 

([pl-.pos  A]  timesl  ([nl:neg  A]  Cn2:neg  B]  axiom  nl  pi)  n) 

P) 

{A:o>  {B:o> 

neg  (A  times  B) 

->  pos  (B  times  A) 

->  #. 

However,  this  term  does  not  satisfy  the  linearity  constraints  and  thus  does  not  represent  a 
derivation. 

?-  iA:oy  -[6:0} 
lin2 

([n:neg  (A  times  B)] 

[p:pos  (B  times  A)] 

timesr  (Cp2:pos  B]  timesl  ([nl:neg  A]  [n2:neg  B]  axiom  n2  p2)  n) 

([pl:pos  A]  timesl  ([nl:neg  A]  Cn2:neg  B]  axiom  nl  pi)  n) 

p) . 

Solving. . . 
no 

The  same  proof  term  may  also  aanotate  several  valid  derivations  This  phenomenon  illus¬ 
trated  in  the  examples  toward  the  end  of  the  last  section.  We  show  here  two  of  the  possible  four 
derivations  with  the  same  proof  term. 


A,B  - 
A®B 


T0T 

- ( 

-)■  T  0  T 


A®B 


T®T 
■>  T  0  T 


The  implementation  of  the  linearity  constraints  enumerates  all  possible  derivations  whose  annota¬ 
tion  is  the  given  proof  term.  This  always  terminates,  since  there  are  only  finitely  many  possibilities. 
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The  order  of  enumeration  depends  on  the  order  of  the  overlapping  clauses  for  linn  and  linp  since 
they  are  tried  first-to-last. 

?-  L  : 

■[A:o!l-  {B:o3- 
lin2 

[n:neg  (A  times  B)] 

[p:pos  (top  times  top)] 
timesl  (Cnlineg  A]  Cn2:neg  B] 

timesr  ([pl:pos  top]  topr  pi) 

([p2;pos  top]  topr  p2) 

P) 
n . 

Solving. . . 

L  = 

[A :  o]  [B ;  o] 
lin2_all 

([n:neg  (A  times  B)]  [p:pos  (top  times  top)] 
lin_timesl 

([nl:neg  A]  [n2:neg  B] 

lin.timesr  (Cp2:pos  top]  lin.topr)  (Cpl:pos  top]  lin_topr) 
linp_topr_0  linp_topr_0) 

(Cnl:neg  A]  linn_timesr_l  [pltpos  top]  linn_topr) 

(Cn2:neg  B]  linn_timesr_l  [plrpos  top]  linn.topr)) 

([n:neg  (A  times  B)]  linp.timesl  Cnl:neg  A]  [n2:neg  B]  linp_timesr_0) 

(Cp:pos  (top  times  top)]  linn_timesl_0) . 


[A :  o]  [B :  o] 
lin2_all 

([n:neg  (A  times  B)]  [p:pos  (top  times  top)] 
lin_timesl 

([nl:neg  A]  [n2:neg  B] 

lin_timesr  (Cp2:pos  top]  lin_topr)  ([pl:pos  top]  lin_topr) 
linp_topr_0  linp_topr_0) 

(Cnl:neg  A]  linn_timesr_2  Cp2:pos  top]  linn_topr) 

([n2:neg  B]  linn_timesr_l  [pltpos  top]  linn_topr)) 

([ntneg  (A  times  B)]  linp_timesl  [nltneg  A]  [n2:neg  B]  linp_timesr_0) 
([ptpos  (top  times  top)]  linn_timesl_0) . 


[A  to]  [B  t  o] 
lin2_all 

([ntneg  (A  times  B)]  [ptpos  (top  times  top)] 
lin_timesl 

([nltneg  A]  [n2tneg  B] 

lin_timesr  ([p2tpos  top]  lin_topr)  ([pltpos  top]  lin_topr) 
linp_topr_0  linp_topr_0) 

([nltneg  A]  linn_timesr_l  [pltpos  top]  linn_topr) 
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(Cn2:neg  B]  linn_timesr_2  [p2:pos  top]  linn_topr)) 

(Cnrneg  (A  times  B)]  linp_timesl  [nlrneg  A]  [n2:neg  B]  linp_timesr_0) 
(Cp:pos  (top  times  top)]  linn_timesl_0) . 


L  = 

[A :  o]  [B  :  o] 
lin2_all 

([n:neg  (A  times  B)]  [p:pos  (top  times  top)] 
lin_t imesl 

(Cnl:neg  A]  [n2:neg  B] 

lin_timesr  ([p2:pos  top]  lin_topr)  ([pl;pos  top]  lin_topr) 
linp_topr_0  linp_topr_0) 

([nl:neg  A]  linn_timesr_2  Cp2:pos  top]  linn_topr) 

(Cn2:neg  B]  linn_timesr_2  [p2:pos  top]  linn_topr)) 

(Cn:neg  (A  times  B)]  linp_timesl  Cnl:neg  A]  Cn2:neg  B]  linp_timesr_0) 
(Cprpos  (top  times  top)]  linn_timesl_0) . 

no  more  solutions 


6  Admissibility  of  Cut 


In  this  section  we  prove  the  admissibility  of  cut  in  LV.  The  admissibility  of  cut  in  CLL  is  a  simple 
corollary  by  virtue  of  the  translations  between  LV  and  CLL  from  Theorem  2. 

Theorem  8  (Admissibility  of  Cut  in  LV)  The  three  rules  of  cut 

«^;ri^A,Ai;0  ^;r2,A— >A2;© 


$;ri,r2^Ai,A2;0 


•Cut 


^;-^A;0  (^,A);r— >A;0 

^;r  — ^  A;0 


-Cut! 


r  — )•  A;  (A,  0)  ^;A— s--;0 

^';r— >  A;0 


■Cut? 


for  the  linear  sequent  calculus  LV  are  admissible. 

Proof:  Let  A  be  the  cut  formula  and  d  and  e  the  proof  terms  of  the  derivations  of  the  premises 
of  the  cut  rules.  We  proceed  by  three  nested  structural  inductions  on  A,  d  and  e,  simultaneously 
for  Cut,  Cut!,  and  Cut?.  Appeals  to  Cut!  and  Cut?  are  considered  greater  than  Cut,  if  the  cut 
formula  A  is  the  same.  To  rephrase:  We  may  appeal  to  the  induction  hypothesis  on  (1)  a  smaller 
cut  formula,  (2)  the  same  cut  formula,  but  pass  from  Cut!  or  Cut?  to  Cut,  (3)  the  same  cut  formula 
and  rule,  but  smaller  proof  term  d,  or  (4)  the  same  cut  formula,  rule,  proof  terms  d,  but  smaller 
proof  term  e.  Actually,  there  is  no  natural  priority  between  d  and  e:  Whenever  we  need  the 
induction  hypothesis  for  a  smaller  e,  d  remains  the  same,  and  vice  versa. 

In  the  proof  we  distinguish  the  following  classes  of  cases. 

1.  Axiom  cases.  Either  V  or  £  \s  an  axiom,  with  the  cut  formula  as  principal  formula. 
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2.  Essential  cases.  The  cut  formula  is  the  principal  formula  of  the  last  inference  in  both  V  and 
T. 

3.  Structural  cases.  The  cut  formula  is  the  principal  formula  of  a  structural  rule  {\D  or  ?D)  at 
the  end  of  V  or  E.  There  are  only  two  such  cases. 

4.  Commutative  cases.  The  cut  formula  is  a  side  formula  of  the  last  inference  in  P  or  f.  There 
are  three  subclasses  of  this  class,  depending  on  whether  we  are  considering  Cut,  Cut!  or  Cut?. 

These  cover  all  possible  cases  of  Cut,  Cut!  and  Cut?.  The  general  idea  of  the  proof  in  each  class  of 
cases  is  summarized  below. 

1.  Axiom  cases.  Here  the  cut  can  be  eliminated  outright. 

2.  Essential  cases.  Here  we  can  eliminate  the  cut  by  appeals  to  the  induction  hypothesis  with 
immediate  subformulas  of  the  cut  formula  A. 

3.  Structural  cases.  Here  we  appeal  to  the  induction  hypotheses  on  an  immediate  subderivation 
followed  by  a  switch  from  Cut!  or  Cut?  to  Cut,  maintaining  the  same  cut  formula  A. 

4.  Commutative  cases.  Here  we  appeal  to  the  induction  hypothesis  on  the  proof  terms  labeling 
each  immediate  subderivation  of  P  or  S.  It  is  also  in  some  of  these  cases  that  we  need 
weakening  for  the  non-linear  zones  without  changing  the  proof  term. 

Many  of  the  cases  are  very  similar.  For  each  class  we  only  show  some  representative  cases  below. 

The  algorithm  for  admissibility  of  cut  that  may  be  extracted  from  our  proof  is  non-deterministic, 
since  the  various  cases  are  not  mutually  exclusive.  Our  implementation  computes  a  proof  term  for 
the  conclusion,  given  proof  terms  for  the  premises  of  a  cut.  In  Elf,  this  is  represented  as  a  relation 
between  A,  d,  e  (the  input  arguments)  and  /  (the  resulting  derivation).  Since  there  are  three  forms 
of  cut,  we  have  three  corresponding  type  families. 

ad  :  {A:o}  (pos  A  ->  #)  ->  (neg  A  ->  #)  ->  #  ->  type, 
ad!  :  -CA:o>  (pos  A  ->  #)  ->  (neg!  A  ->  #)  ->  #  ->  type, 
ad?  :  ik-.o}  (pos?  A  ->  #)  ->  (neg  A  ->  #)  ->  #  ->  type. 

Reasoning  about  linearity  constraints  or  distribution  of  hypotheses  is  not  implemented  in  these 
type  families.  We  therefore  do  not  consider  them  an  implementation  of  the  proof,  but  only  of  some 
of  its  operational  aspects.  Nonetheless,  it  is  suIRcient  to  non-deterministically  calculate  proof  terms 
for  the  conclusion  of  a  cut.  The  complete  implementation  is  given  in  Appendix  A.4.  An  example 
of  its  execution  may  be  found  in  Appendix  A. 5. 

Axiom  Cases.  These  comprise  two  cases:  either  "D  or  5  is  an  axiom  with  the  principal  formula 
being  the  cut  formula.  Since  axioms  permit  no  linear  side  formulas  only  two  further  commutative 
cases  (for  Cut!  and  Cut?)  involving  axioms  arise.  We  show  the  case  where  V  is  an  axiom;  the  other 
case  is  symmetric. 

Case: 

- 1 

T)  =  _  .  axiomiVp  ,  ^ 

’F;Ar:A  — >  p:A-,© 
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and  E  ::  (T';  r2,  n:A  Aj;©)  is  arbitrary.  Then  we  construct 

[N/n\£ 

4';r2,iV:A^^'A2;0 

ad_axiom_l  :  ad  A  ( [p]  axiom  N  p)  E  (E  N) . 

In  the  remaining  cases  we  omit  the  proof  terms,  since  they  may  easily  be  reconstructed  from  the 
derivations  and  clutter  the  presentation.  In  cases  we  proof  terms  are  important  for  the  induction 
we  assign  proof  term  e  to  derivation  d  to  di  to  X>i,  etc. 

Essential  Cases.  These  are  the  cases  where  the  cut  formula  A  is  the  principal  formula  of  the 
last  inference  in  V  and  E. 

Case: 

Vi  T>2 

v=  ^;r;^Ai,A;;e  A2,a";0 

- (g)i? 

>Ai(8)A2,A;,A'/;0 


and 


Then  we  construct 


A 

£—  ^;r2,Ai,A2 — >  A2;@ 

- <SiL. 

r2)  Ai  0  A2  — >  A2;  0 


Ei  ::  (5r;r;,r2,A2-^A;,A2;0) 

T  ::  ($ ;  T; ,  T"  r2,  A;,  A",  A2;  0) 


By  ind.  hyp.  on  Ai  from  Pi  and  Ei 
By  ind.  hyp.  on  A2  from  V2  and  E[ 


ad_times  :  ad  (Al  times  A2)  ( [p]  tiraesr  D1  D2  p)  ( [n]  timesl  El  n)  F 
<-  ({n2:neg  A2}  ad  Al  D1  ([nl]  El  nl  n2)  (El’  n2)) 

<-  ad  A2  D2  El’  F. 


In  the  remaining  cases  we  omit  and  “;0”  when  they  do  not  change  throughout  the  argument 
as  above.  A  full  description  of  the  case  can  be  obtained  by  adjoining  them  to  the  left  and  right  of 
every  sequent  in  its  abbreviated  form. 

Case: 


P=  . 


IR 


and 


E  = 


El 


IL. 


Then  P  =  is  a  derivation  with  the  desired  end  sequent. 
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ad_one  :  ad  (one)  ( [p]  oner  p)  ([n]  onel  El  n)  El. 
Case: 


V  = 


I>i 


Ai,  Ai 


ri 


V2 

A2,  Ai 


Fi 


A1&A2,  Ai 


&R 


and 


£  = 


£x 

r2,  Ai  — )■  A2 
- &i?i 

r2,  A1&A2  — y  A2 


Then 


T  ::  (Fi,  r2  — Ai,  A2)  By  ind.  hyp.  on  Ai  from  T>i  and  Ei 

ad.andl  :  ad  (AI  and  A2)  ( [p]  andr  D1  D2  p)  ( [n]  andll  El  n)  F 
<-  ad  AI  D1  El  F. 


Case:  The  case  where  Z  ends  in  &i?2  is  symmetric  to  the  previous  one. 

ad_and2  :  ad  (AI  and  A2)  ( Cp]  andr  D1  D2  p)  ( [n]  andl2  E2  n)  F 
<-  ad  A2  D2  E2  F. 


Case:  There  is  no  essential  case  for  the  additive  unit  T,  since  there  is  no  left  rule. 
Case: 


V  = 


Vx 

ri,Ai-^  Ai 

- 'i? 

Ti  ^  A^Ai 


and 


Z^ 


—'L. 


Then 


T-.:  (ri,F2 


Ai,  A2) 


By  ind.  hyp.  on  Ai  from  Zi  and  V\. 


ad_perp  :  ad  (perp  AI)  ( [p]  perpr  D1  p)  ([n]  perpl  El  n)  F 
<-  ad  AI  El  D1  F. 


28 


STRUCTURAL  CUT  ELIMINATION  IN  LINEAR  LOGIC 


Case: 


and 


Then 


V, 

x>  =  Ti — [a/a;]Ai,  Ai 
- 

Fi  — >  'ix.  Ai,  Ai 


Si 

£-  T2,[t/x]Ai — >  Ai 

- VL 

r2,  Va;.  Ai  — >■  A2 


[t/a]Vi  ::  (Fi  — ^  [^/a:]Ai,  Ai)  Since  Vi  is  parametric  in  a 

T  ::  (Fi,F2  — >■  Ai,  A2)  By  ind.  hyp.  on  [t/x]Ai  from  \t/a\Vi  and  Si 


Note  that  in  first-order  logic  [t/x]Ai  is  structurally  smaller  than  Va:.  Ai;  this  would  break 
down  in  an  attempt  to  extend  this  proof  directly  to  higher-order  logic. 

ad_forall  :  ad  (forall  AI)  ([p]  forallr  D1  p)  ([n]  foralll  T  El  n)  F 
<-  ad  (AI  T)  (D1  T)  El  F. 


Case: 


Vi 

«r;.^Ai;0 

- \R 

^;-^!Ai;e 


and 


Then 


($,Ai);F2-^A2;0 

- \L. 

^;F2,!Ai  ^  A2;0 


F2  — >  A2;  0)  By  ind.  hyp.  on  Ai  with  Cut!  from  Vi  and  £1. 

ad_!  :  ad  (!  AI)  ([p]  !r  Dl!  p)  ( [n]  !1  El  n)  F 
<-  ad!  AI  Dl!  El  F. 

Case: 


and 


Then 


V  = 


Vi 

^■Ti  ^  Ai-{Ai-Q) 

- ?R 

^;Fi  ^?Ai,Ai;0 


£  = 


Si 

5';Ai 

- IL. 
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j:  ;;  fi  _ >  Ai ;  0)  By  ind.  hyp.  on  Ai  with  Cut?  from  Vi  and  Si. 

ad_?  :  ad  (?  AI)  ([p]  ?r  D1  p)  ([n]  ?1  El!  n)  F 
<-  ad?  AI  D1  El!  F. 

Structural  Cases.  There  are  only  two  structural  rules,  \D  and  ?D,  which  copy  a  formula  from 
a  non-linear  to  the  appropriate  linear  zone.  In  case  the  copied  formula  A  is  the  principal  formula 
of  a  Cut!  or  Cut?,  we  first  eliminate  the  remaining  non-linear  hypothesis  or  conclusion  A  and  then 
appeal  to  Cut  on  the  same  formula  A.  This  is  permissable  in  our  structural  induction:  Cut  is 
considered  smaller  than  Cut!  and  Cut?  if  the  cut  formula  does  not  change. 

Case:  V  ::  ($;  •  — y  A;  0)  is  arbitrary  and 


£=  (’i>,A);r2,A-^A2;0  ^ 

(^,A);r2— >  A2;0 

Then  (writing  ei  for  the  proof  term  annotating  £i  and  d  for  the  proof  term  of  T>) 

S'l  ::  (^;  r2,  A  — )■  A2;  0)  By  ind.  hyp.  on  A,  d,  and  ei  with  Cut!  from  V  and  Si 

Ti  ::  r2  — >  A2;  0)  By  ind.  hyp.  on  A  with  Cut  from  V  and  £[ 

ad!_d  :  ad!  A  D!  ([n!]  !d  (El  n!)  n!)  F 

<-  ({nl:neg  A}  ad!  A  D!  ([n!]  El  n!  nl)  (El’  nl)) 

<-  ad  A  D!  El’  F. 

Case:  The  case  of  a  Cut?  where  V  ends  in  ?D  and  S  is  arbitrary  is  dual  to  the  previous  one. 

ad?_r  :  ad?  A  ( [p?]  ?d  (D1  p?)  p?)  E!  F 

<-  ({pl:pos  A}  ad?  A  ([p?]  D1  p?  pi)  E!  (Dl’  pi)) 

<-  ad  A  Dl’  E!  F. 

Commutative  Cases  of  Cut.  Here  we  have  a  Cut  where  the  cut  formula  is  a  side  formula  of 
the  last  inference  in  V  (left  commutative  cases)  or  S  (right  commutative  cases).  These  cases  are 
not  mutually  exclusive,  so  the  algorithm  implicit  in  this  proof  is  naturally  non-deterministic.  We 
only  show  a  few  cases,  since  they  are  very  repetitive:  We  appeal  to  the  induction  hypothesis  on  a 
subderivation  and  then  re-apply  the  last  inference. 

Case:  V  ::  (Fi  — y  A,  Ai)  is  arbitrary  and 

Si  S2 

r'2,A— >5i,a'2  rg— >B2,a'2' 

- — - ®R. 

r'2,  r'2',  A  (8)  S2,  A'2,  A'2' 

Then  (writing  ei  for  the  proof  term  annotating  Si) 


30 


STRUCTURAL  CUT  ELIMINATION  IN  LINEAR  LOGIC 


Z'y  "  (Ti,  r2  — ^  Bi,  Ai,  A2)  By  ind.  hyp.  on  A,  d,  and  ei  from  V  and  £i 

T  ::  (Fi,  r2,  r2  — )■  Bi  ®  £2,  Ai,  A2,  A2)  By  ®R  from  £[  and  S2. 

There  is  a  symmetric  case  where  A  occurs  in  the  hypotheses  of  £2-  We  show  both  cases  in 

Elf. 

adr_timesrl  :  ad  A  D  ( [n]  timesr  (El  n)  E2  P)  (timesr  El’  E2  P) 

<-  ({plrpos  BI}  ad  A  D  ([n]  El  n  pi)  (El’  pi)). 

adr_timesr2  :  ad  A  D  ( [n]  timesr  El  (E2  n)  P)  (timesr  El  E2’  P) 

<-  (■Cp2:pos  B2}  ad  A  D  ([n]  E2  n  p2)  (E2’  p2)). 

Case:  V  ::  (Fi  — ^  A,  Ai)  is  arbitrary  and 

£i  £2 

£—  F2,A — >Bi,A2  F2,A  — >B2,A2 

- &R. 

F2,  A  — )•  B1&B2,  A2 

Then  (writing  ei  and  62  for  the  proof  terms  annotating  £i  and  £2,  respectively) 

£[  ::  (Fi,F2  — >  5i,  Ai,  A2)  By  ind.  hyp.  on  A,  d,  and  ei  from  V  and  £i 

£'2  ::  (Fi,  F2  — ^  B2,  Ai,  A2)  By  ind.  hyp.  on  A,  d,  and  62  from  V  and  £2 

T  ::  (Fi,  F2  — ^  £i<S<S2,  Ai,  A2)  By  &i?  from  £[  and  £'2. 

adr_andr  :  ad  A  D  ( [n]  andr  (El  n)  (E2  n)  P)  (andr  El’  E2’  P) 

<-  ({pl:pos  Bl>  ad  A  D  ( [n]  El  n  pi)  (El’  pi)) 

<-  (Fp2:pos  B2}  ad  A  D  ([n]  E2  n  p2)  (E2’  p2)). 

Case:  V  ::  (Fi  — >■  A,  Ai)  is  arbitrary  and  £  ends  in  \R  with  A  as  a  side  formula.  This  case  is 
impossible,  since  !R  permits  no  linear  side  formulas. 

Case:  V  Fi  — >  A,  Ai;  0)  is  arbitrary  and 

A 

£:=  («^,Bi);F'2,A-^  A2;0 

- IL 

^’;F'2,!Bi,A— >  A2;0 

In  this  case  we  cannot  directly  appeal  to  the  induction  hypothesis,  since  the  non-linear  hy¬ 
potheses  of  £1  contain  Bi,  but  not  those  of  V.  However,  we  can  apply  weakening  (WL, 
Lemma  3)  to  V  without  changing  its  proof  term  d.  Thus  (writing  ei  for  the  proof  term  of 

(D,Bx)  ::((^,Hi);Fi  Aa,Ai;0) 

::((^,Hi);Fi,F'2— ^Ai,A2;0) 

(^’;Fi,F'2,!Si  ^  Ai,A2;0) 

adr_!l  :  ad  A  D  ([n]  !1  (El  n)  N)  ( 

<-  ({nl!:neg!  BI}  ad  A  D 


By  Lemma  3 

By  ind.  hyp.  on  A,  d,  and  ei  from  (T>,Bi)  and  £1 

By  !L  from  £[ 
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Commutative  Cases  of  Cut!.  Here  we  have  a  Cut!  where  the  cut  formula  A  is  not  the  principal 
formula  of  Note  that  the  only  way  A  could  be  the  principal  formula  would  be  a  structural  rule 
ID,  since  otherwise  non-linear  hypothesis  participate  in  inferences  only  as  side  formulas.  Thus  we 
have  precisely  one  case  for  each  possible  inference  rule  R  in  5,  including  axioms.  In  each  case  we 
simply  commute  the  cut  into  the  premises  of  S  and  then  re-apply  R  to  the  results  of  appeals  to 
the  induction  hyphotheses.  Note  that  we  do  not  distinguish  cases  based  on  the  last  inference  in  V. 
Eventually,  the  Cut!  disappears  at  the  leaves  of  the  derivation  or  is  involved  in  a  structural  rule,  in 
which  case  a  structural  case  from  above  applies.  We  show  only  two  of  the  mechanical  commutative 
cases  here. 

Case:  V  ::  ('F;  ■  — >  A;  0)  is  arbitrary  and 

^  - 1. 

(9,A);B  ^  B;Q 

Then  _ ^ 

9;B—>-B;Q 

is  a  derivation  with  the  desired  end  sequent. 

ad!r_axioin  :  ad!  A  D!  ([n!]  axiom  N  P)  (axiom  N  P) . 

Case:  V  ::  ("F;  ■  — >  A;  0)  is  arbitrary  and 

Si  S2 

(’F,A);r'2^Bi,A^;0  A),  r'2' ^  B2,  A'2';  0 

- — - - ®R. 

(^,  A),  r' ,  r'2'  — >  0  B2,  A'2,  A'2';  0 

Writing  d,  ei  and  62  for  the  proof  terms  of  V,  Si  and  £’2,  respectively,  we  obtain 

S[  ::  (5^;  ^2  — 5i,  A2;  0)  By  ind.  hyp.  on  A,  d,  and  ei  from  V  and  Si 

S2  ■■■■  r2  — B2,  A2;  0)  By  ind.  hyp.  on  A,  d,  and  62  from  V  and  S2 

T  r'2,  r'2'  — >  Bi®B2,  A^,  A^';  0)  By  ®R  from  S[  and  S'2. 

ad!r_timesr  :  ad!  A  D!  ([n!]  timesr  (El  n!)  (E2  n!)  P) 

(timesr  El’  E2’  P) 

<-  (•{pl:pos  Bl}  ad!  A  D!  ([n!]  El  n!  pi)  (El’  pD) 

<-  (■Cp2:pos  B2}  ad!  A  D!  ([n!]  E2  n!  p2)  (E2’  p2)). 

Commutative  Cases  of  Cut?.  Here  we  have  a  Cut?  where  the  cut  formula  A  is  not  the  principal 
formula  of  V.  These  cases  are  dual  to  the  preceding  commutative  cases  Cut!. 

□ 

The  faithful  and  concise  implementation  of  this  proof  in  the  spirit  of  similar  representations 
for  intuitionistic  and  classical  logic  ([Pfe94])  would  require  a  linear  logical  framework,  which  is  the 
subject  of  current  research.  By  meta-level  reasoning  (Le.,  the  informal  proof  and  properties  of  LF) 
we  know  that  our  implementation  always  maps  linear  derivations  to  linear  derivations. 
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Corollary  9  (Admissibility  of  Cut  for  CLL)  The  rule  of  cut  is  admissible  in  CLL. 

Proof:  We  translate  the  cut  free  derivations  of  the  premises  of  the  cut  in  CLL  to  LV  (using 
Theorem  2)  and  apply  Theorem  8.  We  then  translate  the  resulting  cut-free  derivation  to  a  cut-free 
derivation  in  CLL  using  Theorem  2  in  the  other  direction.  □ 

The  translations  between  CLL  and  LV  preserve  enough  structure  that  we  could  map  our  algo¬ 
rithm  for  admissibility  of  cut  on  LV  to  an  algorithm  for  admissibility  of  cut  on  CLL.  We  do  not 
pursue  this  here. 

7  Cut  Elimination 

The  theorem  of  cut  elimination  states  that  a  derivation  possibly  using  many  cuts  may  be  trans¬ 
formed  into  one  without  cuts.  This  follows  by  a  simple  structural  induction  from  the  admissibility 
of  cut.  We  introduce  a  new  system,  LV*"  with  primitive  rules  of  cut  and  write  P  — A;  0  for 
the  system  without  proof  terms  and  P  A;  0  for  the  system  with  proof  terms.  The  latter 
contains  the  rules 


$;Pi -^+p:A,Ai;0  P2,  n:A -4+ A2;  0 


Cut 


^;-A+p:A;0  (^,  7i":A);  P  A;  0 

^  cut!-(Ap;A.  d)p“n“:.4.  e)^  ^  ^ 


Cut! 


^;P — >■+ A;  (p‘^:A,  0)  ^;n:A 


•;e 


^  p  cut?  (A  Dy(\n-.A.  e)^  ^ 


■Cut? 


Theorem  10  (Cut  Elimination  for  LV*")  i7’^;P  -^+  A;  0  then'^]T  A;  Q  for  some  proof 

term  d. 

Proof:  By  structural  induction  on  d.  For  all  rules  R  except  the  cut  rules  we  appeal  to  induc¬ 
tion  hypotheses  on  the  derivation  (s)  of  the  premise(s)  and  then  apply  R  to  the  resulting  cut-free 
derivation  (s).  In  the  case  of  a  cut  we  first  eliminate  all  cuts  from  the  derivations  of  the  premises 
(using  the  induction  hypothesis)  and  then  apply  the  admissibility  of  cut  for  the  resulting  cut-free 
derivations  (Theorem  8)  to  obtain  a  cut-free  derivation  of  the  conclusion.  □ 

Since  the  Elf  language  implementation  currently  supports  neither  subtyping  nor  modules,  we 
implement  LV^  declaring  a  new  type  family  @  for  derivations  with  cut  and  copying  all  the  inference 
rules,  appending  *  to  their  names  to  avoid  name  conflicts.  The  implementation  of  the  cut  elimina¬ 
tion  algorithm  induced  by  our  proof  above  is  then  straightforward.  We  only  show  the  declarations, 
one  congruence  case,  and  the  cut  cases.  The  full  implementation  appears  in  Appendix  A. 7.  Once 
again,  the  implementation  does  not  check  linearity  constraints. 
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elim  :  ®  ->  #  ->  type. 

ce_timesr  :  elim  (timesr*  Dl*  D2~  P)  (timesr  D1  D2  P) 
<-  ({pi}  elim  (Dl~  pi)  (D1  pi)) 

<-  ({p2}  elim  (02*  p2)  (D2  p2)). 

ce_cut  :  elim  (cut*  Dl*  D2')  F 

<-  ({p}  elim  (Dl*  p)  (D1  p)) 

<-  ({n>  elim  (D2"  n)  (D2  n)) 

<-  ad  A  D1  D2  F. 

ce_cut !  :  elim  (cut!"  Dl!"  D2*)  F 

<-  ({p}  elim  (Dl!"  p)  (Dl!  p)) 

<-  ({n!}  elim  (D2"  n!)  (D2  n!)) 

<-  ad!  A  Dl!  D2  F. 

ce_cut?  :  elim  (cut?"  Dl"  D2!")  F 

<-  ({p?}  elim  (Dl"  p?)  (Dl  p?)) 

<-  ({n>  elim  (D2!"  n)  (D2!  n)) 

<-  ad?  A  Dl  D2!  F. 


We  can  obtain  cut  elimination  for  CLL  in  three  ways:  (1)  we  could  prove  it  by  structural 
induction  from  Corollary  9,  (2)  we  could  extend  the  translations  from  Theorem  2  to  include  cut 
and  then  use  cut  elimination  for  LV,  or  (3)  we  could  obtain  a  direct  algorithm  by  composing  the 
translations  with  the  cut  elimination  steps  of  LV.  In  any  case,  we  have: 


Corollary  11  (Cut  Elimination  for  CLL)  The  linear  sequent  calculus  CLL  satisfies  cut  elimi¬ 
nation. 


8  Representation  in  a  Linear  Meta-Language 


In  this  somewhat  speculative  section  we  show  how  to  exploit  a  meta-language  based  on  linear 
natural  deduction  in  order  to  represent  the  linear  sequent  calculus  more  concisely.  A  full  realization 
of  this  idea  requires  a  dependently  typed  linear  logical  framework  [MPP92]  which  is  the  subject 
of  current  research  in  joint  work  with  1.  Cervesato.  In  the  absence  of  such  a  framework  we  limit 
ourselves  to  the  propositional  fragment  of  the  linear  sequent  calculus  LV,  since  its  proof  terms  may 
be  mapped  rather  directly  onto  the  Lolli  fragment  of  a  linear  natural  deduction  calculus  [HM94]. 
We  believe  that  the  ideas  can  be  extended  naturally  to  a  full  calculus,  including  the  proof  of  cut 
elimination.  Throughout  this  section,  we  restrict  ourselves  to  the  propositional  fragment  LVP  of 
LV. 

The  intuitionistic  meta-language  we  need  contains  linear  and  intuitionistic  implication,  additive 
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conjunction,  and  the  additive  unit.  We  endow  its  natural  deduction  formulation  with  proof  terms. 

Linear  Types  A  ::=  P  |  Ai  — o  A2  |  A1&A2  |  T  |  Ai  — >  A2 
Linear  Terms  M  ::=  c  \  x 

I  Ax:A.  M  I  Ml  M2 
I  (Ml, M2)  I  ttiM  I  it2M 
10 

I  A“x:A.  M  I  Ml  •  M2 
Linear  Contexts  G  ::=  •  |  G,  a;:A 

The  overall  context  is  divided  into  non-linear  and  linear  zones.  We  use  E  for  the  non-linear  context 
and  L  for  the  linear  context,  fixing  a  signature  S  for  constants.  We  define  here  only  the  judgment 
for  canonical  forms  (which  correspond  to  so-called  uniform  derivations  in  [HM94]),  because  this  is 
required  for  adequacy.  We  obtain  the  typing  judgment  for  this  linear  A-calculus  by  replacing  both 
■fl'  and  4-  by  :  and  omitting  the  (now  redundant)  rule  which  coerces  from  to  jl".  It  follows  from 
results  in  [Hod94]  that  every  term  can  be  transformed  into  canonical  form.  Note  that  the  canonical 
forms  correspond  to  long  /37?-normal  forms. 

P;  Z  M  -fl  A  M  is  canonical  of  type  A  in  context  P;  L 
E\L\-  M  A  M  is  atomic  of  type  A  in  context  P;  L 


for  Ai  —0  A2 
for  A1&A2 
for  T 

for  Ai  — ^  A2 


It  is  defined  by  the  following  rules. 

E-,{L,x:A)  h  MfrB 
Ax:A.  Mfr  A-^5 
P;  I  h  M  fr  A  P;  Z  h  A  fr  B 
P;  L  h  (M,  N)  fr  A&P 
P;  Z  h  M  4  P 
P;  Z  h  M  fr  P 


E;x:Ah  a;  4-  A 

P;Zih  M4A^S  P;Z2HAfrA 
P;Zi,Z2  H  MA4.P 
P;  Z  h  M  4.  A&B 
E-,Lh  TTiMiA 


(P,x:A);Zh  M  it  B 
E;Lh^  )^x:A.  M  it  A-^  B 


EtLh  OUT 

c:A  in  S 
P;  •  h  c  4  A 

a;:A  in  P 
P;  ■  f-  a;  4  A 

P;  Z  h  M  4  A  P  P;  •  h  A  fr  A 

P;Zh  M-A4P 
P;  Z  h  M  4  A&P 
P;Zb  7r2M4P 


Below  we  give  the  declarations  of  the  constants  that  could  be  used  to  construct  the  linear  A- 
terms  to  obtain  an  adequate  representation  of  sequent  derivations  in  LV.  Alternatively,  one  can 
think  of  this  as  a  Lolli  program,  where  each  clause  has  been  labelled. 
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#  :  type . 
neg ! :  o  ->  type . 
neg  :  o  ->  type, 
pos  :  o  ->  type, 
pos?:  o  ->  type. 


*/,  Token  for  Derivations 

*/,  Modal  Hypotheses  (fcir  left) 

*/,  Hypotheses  (left) 

'/,  Conclusions  (right) 

'/.  Modal  Conclusions  (far  right) 


axiom  ;  (neg  A  -o  pos  A  -o  #) . 


timesr  :  (pos  A  -o  #)  timesl  :  (neg  A  o  neg  B  o  #) 

-o  (pos  B  -o  #)  -o  (neg  (A  times  B)  -o  #) . 

-o  (pos  (A  times  B)  -o  #) . 


oner  :  (pos  one  -o  #) . 


andr  :  ((pos  A  -o  #)  ft  (pos  B  -o  #)) 
-o  (pos  (A  and  B)  -o  #) . 


topr  :  T  -o  (pos  (top)  -o  #) . 

perpr  :  (neg  A  -o  #) 

-0  (pos  (perp  A)  -o  #) . 

!r  ;  (pos  A  -o  #) 

->  (pos  ( !  A)  -o  #) . 

?r  ;  (pos?  A  ->  #) 

-o  (pos  (?  A)  -o  #) . 

!d  :  (neg  A  -o  #) 

-o  (neg !  A  ->  #) . 

If  the  cut  rules  were  primitive,  they 

cut  :  (pos  A  -o  #) 

-o  (neg  A  -o  #) 

-o  #. 


onel  :  #  -o  (neg  one  -o  #) . 

cindll  ;  (neg  A  -o  #) 

-o  (neg  (A  and  B)  -o  #) . 

andl2  :  (neg  B  -o  #) 

-o  (neg  (A  and  B)  -o  #) . 

no  topi 

perpl  :  (pos  A  -o  #) 

-o  (neg  (perp  A)  -o  #) . 

!1  :  (neg!  A  ->  #) 

-o  (neg  ( !  A)  -o  #) . 

?1  :  (neg  A  -o  #) 

->  (neg  (?  A)  -o  #) . 

?d  :  (pos  A  -o  #) 

-o  (pos?  A  ->  #) . 

be  represented  by 


cut!  :  (pos  A  -o  #) 

->  (neg!  A  ->  #) 

-o  #. 

cut?  ;  (neg?  A  ->  #) 

-o  (pos  A  -o  #) 

->  #. 

Since  the  framework  can  now  express  linearity  constraints  directly,  we  no  longer  require  the 
judgments  linp,  linn,  and  lin  from  before.  However,  the  ambiguities  of  proof  terms  must  still  be 
taken  into  account  when  formulating  the  adequacy  theorem.  Proof  terms  from  LVP  are  represented 
directly  by  linear  terms  in  the  meta-language.  Sequent  derivations  are  mapped  to  derivations 
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showing  that  these  terms  in  the  meta-language  are  canonical  (and  thereby,  that  they  satisfy  linearity 
constraints).  We  write  ''V'^  for  this  meta-derivation.  We  do  not  write  out  its  definition,  since  it 
follows  obviously  from  the  representation  of  proof  terms.  The  main  point  of  this  mapping  is  that 
linear  hypotheses  and  conclusions  of  the  sequent  derivation  V  are  distributed  to  the  premises  in  an 
analogous  manner  in  ^2?“'. 

Lemma  12  (Soundness  of  Linear  Representation)  Let  V  (^';r  A;  0)  be  a  sequent 
derivation  in  LVP.  Then 


Proof:  By  induction  on  the  structure  of  V.  □ 

Lemma  13  (Completeness  of  Linear  Representation)  Let  E  be  a  non-linear  context  of  the 
form  '"0’'  and  L  be  of  the  form  '"F"',  '"A"'. 

1.  If  E\L\-  M  "fl  #  then  there  exists  a  unique  proof  term  d  such  that  ^d?  =  M. 

2.  For  every  derivation  C  ::  (jE;  L  M  •))■  #)  there  exists  a  unique  LVP  sequent  derivation 

V  ::  A;  0)  such  that  =  £. 

Proof:  By  induction  on  the  structure  of  C.  □ 

Theorem  14  (Adequacy  of  Linear  Representation)  The  representation  function  on  se¬ 
quent  calculus  proof  terms  is  a  bijection  between  valid  proof  terms  d  and  canonical  terms  M  of  type 
#  in  the  appropriate  contexts.  Moreover,  on  sequent  derivations  is  a  bijection  between  sequent 
derivations  V  with  proof  term  d  and  derivations  C  showing  that  ^d?  is  canonical. 

9  Conclusion 

We  presented  LV,  a  sequent  formulation  of  classical  linear  logic  with  proof  terms  and  gave  a 
structural  proof  of  cut  elimination  for  it.  We  also  presented  an  adequate  encoding  of  linear  sequent 
derivations  in  LF  and  an  implementation  of  a  cut  elimination  algorithm  for  LV  in  Elf. 

The  implementation  of  cut  elimination  is  operationally  adequate,  but  it  is  not  a  complete 
implementation  of  the  cut  elimination  proof,  since  it  disregards  all  linearity  constraints.  We  believe 
it  would  be  possible,  albeit  very  tedious  (without  any  automation)  to  implement  a  proof  of  the 
property  that  our  algorithms  maps  linear  derivations  to  linear  derivations. 

This  naturally  leads  to  the  question  if  the  proof  of  cut  elimination  could  be  represented  faithfully 
and  directly  in  a  linear  logical  framework  along  the  lines  of  [MPP92].  We  conjecture  that  this  is 
possible  and  plan  to  investigate  it  in  future  work.  Preliminary  evidence  in  this  direction  is  a  more 
direct  encoding  of  sequent  derivations  themselves  presented  in  Section  8. 

Another  interesting  direction  for  further  research  would  be  to  reformulate  the  algorithm  into  a 
set  of  higher-order  rewrite  rules  on  linear  A-terms.  The  resulting  system  appears  to  be  canonical 
modulo  permutations  of  adjacent  inferences  as  analyzed  by  Galmiche  &:  Perrier  [GP].  We  have 
checked  this  mechanically  only  for  the  intuitionistic  and  classical  (non-linear)  version  of  our  cut 
elimination  procedure  as  presented  in  [Pfe94]. 
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A  Complete  Implementation 

A.l  Formulas 

‘/.file  formulas. elf 

i  :  type .  individuals 
o  :  type.  */,  formulas 
‘/.name  i  S 
‘/.name  o  A  B  C 

‘/.  Multiplicative  connectives 

times  :  o  ->  o  ->  o.  ‘/.infix  right  11  times 

one  :  o . 

‘/.  Additive  connectives 

and  :  o  ->  o  ->  o.  ‘/.infix  right  11  and 

top  :  o. 

'/.  Involution 
perp  :  o  ->  o . 

‘/.  Quantifier 

forall  :  (i  ->  o)  ->  o. 

‘/.  Exponentials 
!  :  o  ->  o. 

?  ;  o  ->  o. 

A. 2  Sequent  Calculus  LV 

‘/.file  Iv.elf 

#  :  type . 
neg ! :  o  ->  type 
neg  :  o  ->  type 
pos  :  o  ->  type 
pos?:  o  ->  type 
‘/.name  #  D 
‘/.name  neg !  N ! 

‘/.name  neg  N 
‘/.name  pos  P 
‘/.name  pos?  N? 

‘/.‘/.  Axioms 

axiom  :  (neg  A  ->  pos  A  ->  #) . 

‘/.‘/.  Multiplicative  Connectives 

timesr  :  (pos  A  ->  #) 

->  (pos  B  ->  #) 


‘/.  Token  (for  derivations) 

Exponential  Hypotheses  (far  left  zone) 

‘/.  Hypotheses  (left  zone) 

‘/.  Conclusions  (right  zone) 

‘/.  Exponential  Conclusions  (far  right  zone) 
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->  (pos  (A  times  B)  ->  #). 

timesl  :  (neg  A  ->  neg  B  ->  #) 

->  (neg  (A  times  B)  ->  #). 

oner  :  (pos  one  ->  #) . 

onel  :  # 

->  (neg  one  ->  #) . 

'/,*/.  Additive  Connectives 

andr  :  (pos  A  ->  #)  ->  (pos  B  ->  #) 
->  (pos  (A  and  B)  ->  #) . 

andll  :  (neg  A  ->  #) 

->  (neg  (A  and  B)  ->  #). 

andl2  :  (neg  B  ->  #) 

->  (neg  (A  and  B)  ->  #) . 

topr  :  (pos  (top)  ->  #) . 

*/,  no  topi 

*/,*/.  Involution 

perpr  :  (neg  A  ->  #) 

->  (pos  (perp  A)  ->  #) . 

perpl  :  (pos  A  ->  #) 

->  (neg  (perp  A)  ->  #) . 

*/,*/,  quantifier 

forallr  :  ({a:i>  pos  (A  a)  ->  #) 

->  (pos  (forall  A)  ->  #). 

foralll  :  {T:i}  (neg  (A  T)  ->  #) 

->  (neg  (forall  A)  ->  #) . 

*/,*/,  Exponentials 

!r  :  (pos  A  ->  #) 

->  (pos  ( !  A)  ->  #) . 

!1  :  (neg!  A  ->  #) 

->  (neg  ( !  A)  ->  #) . 

Id  :  (neg  A  ->  #) 

->  (neg I  A  ->  #) . 
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?r  :  (pos?  A  ->  #) 

->  (pos  (?  A)  ->  #)  . 

?1  :  (neg  A  ->  #) 

->  (neg  (?  A)  ->  #) . 

?d  :  (pos  A  ->  #) 

->  (pos?  A  ->  #) . 


A. 3  Linearity  Constraints 

'/.file  linear. elf 

'/,*/,  Linear  functions  in  positive  formula 

linp  :  (pos  A  ->  #)  ->  type. 

'/.mode  -linp  +D 
'/.lex  D 


linp_axiom 

;  linp  ( [p]  axiom  N  p) . 

linp_timesr_0  : 

;  linp  ([p]  timesr  D1  D2  p) . 

linp_timesr_l  : 

;  linp  (Cp]  timesr  (D1  p)  D2  P) 

<-  (-Cpl}  linp  ([p]  D1  p  pi)). 

linp_timesr_2  : 

;  linp  (Cp]  timesr  D1  (D2  p)  P) 

<-  (-[p2}  linp  ([p]  D2  p  p2)). 

linp_timesl 

:  linp  ([p]  timesl  (D1  p)  N) 

<-  ({nl}  ■Cn2}  linp  ( Cp]  D1  p  nl  n2)) 

linp_oner_0 

:  linp  (Cp]  oner  p) . 

linp_onel  : 

:  linp  (Cp]  onel  (D1  p)  N) 

<-  linp  (Cp]  D1  p) . 

linp_andr_0  ; 

:  linp  ( Cp]  andr  D1  D2  p) . 

linp_andr  ; 

;  linp  (Cp]  andr  (D1  p)  (D2  p)  P) 

<-  ({pl>  linp  (Cp]  D1  p  pD) 

<-  ({p2>  linp  (Cp]  D2  p  p2)). 

linp_andll  ; 

;  linp  ( Cp]  andll  (D1  p)  N) 

<-  ({nl}  linp  (Cp]  D1  p  nl)). 

linp_andl2  ; 

;  linp  (Cp]  andl2  (D2  p)  N) 

<-  ({n2}  linp  (Cp]  D2  p  n2)). 

A  COMPLETE  IMPLEMENTATION 
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linp_topr_0  :  linp  ( [p]  topr  p) . 

linp.topr  :  linp  ([p]  topr  P). 

Iinp_perpr_0  :  linp  ( [p]  perpr  D1  p). 

linp_perpr  :  linp  ( [p]  perpr  (D1  p)  P) 

<-  ({nl}  linp  ([p3  D1  p  nl)). 

linp_perpl  :  linp  ( [p]  perpl  (D1  p)  N) 

<-  ({pll  linp  ([p]  D1  p  pD). 

Iinp_forallr_0  :  linp  ( Cp]  forallr  D1  p) . 

linp.forallr  :  linp  ( [p]  forallr  (D1  p)  P) 

<-  ({a>  {pi}  linp  (Cp]  D1  p  a  pi)). 

linp_foralll  :  linp  ( [p]  foralll  T  (D1  p)  N) 

<-  ({nl}  linp  (Cp]  D1  p  nl)). 

linp_!r_0  :  linp  ( Cp]  -'r  D1  p)  . 

*/,  no  linp_!r:  p  may  not  occur  in  Dl. 

linp_!l  :  linp  ( Cp]  !1  (Dl!  p)  N) 

<-  ({nl!}  linp  (Cp]  Dl!  p  nl!)). 

linp_!d  :  linp  ( Cp]  !d  (Dl  p)  N!) 

<-  ({nl}  linp  (Cp]  Dl  p  nl)). 

linp_?r_0  :  linp  ( Cp]  ?r  Dl  p) . 

linp_?r  :  linp  ( Cp]  ?r  (Dl?  p)  P) 

<-  ({pi?}  linp  (Cp]  Dl?  p  pi?)). 

*/,  no  linp_?l_0  :  p  is  positive 
'/,  no  linp_?l;  p  may  not  occur  in  Dl 

linp_?d  :  linp  ( Cp]  ?d  (Dl  p)  P?) 

<-  ({pi}  linp  (Cp]  Dl  p  pD). 

‘/.y.  Linear  function  in  negative  formula 

linn  :  (neg  A  ->  #)  ->  type. 

'/.mode  -linn  +D 
y.lex  D 

linn_axiom  ;  linn  ( Cn]  axiom  n  P). 
linn_timesr_l  ;  linn  ( Cn]  timesr  (Dl  n)  D2  P) 
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<-  (4pl3-  linn  ([n]  D1  n  pi)). 

linn_tiinesr_2  :  linn  ( [n]  timesr  D1  (D2  n)  P) 

<-  (■[p2>  linn  ( [n]  D2  n  p2)). 

Iinn_timesl_0  :  linn  ( [n]  timesl  D1  n) . 

linn_tiinesl  :  linn  ( [n]  timesl  (D1  n)  N) 

<-  (-[nl}  {n2}  linn  ( Cn]  D1  n  nl  n2)). 

*/,  no  linn_oner 

linn_onel_0  :  linn  ([n]  onel  D1  n) . 

linn_onel  :  linn  ([n]  onel  (D1  n)  N) 

<-  linn  ( [n]  D1  n) . 

linn_andr  :  linn  ([n]  andr  (D1  n)  (D2  n)  P) 

<-  (<pl>  linn  ([n]  D1  n  pi)) 

<-  (^p2>  linn  ([n]  D2  n  p2)). 

Iinn_andll_0  :  linn  ([n]  andll  D1  n) . 

linn_andll  :  linn  ( [n]  andll  (D1  n)  N) 

<-  ({nl}  linn  ([n]  D1  n  nl)). 

Iinn_andl2_0  :  linn  ( [n]  andl2  D2  n) . 

Iinn_andl2  :  linn  ( [n]  andl2  (D2  n)  N) 

<-  ({n2}  linn  ( [n]  D2  n  n2)). 

linn_topr  :  linn  ( [n]  topr  P) . 

linn_perpr  :  linn  ( [n]  perpr  (D1  n)  P) 

<-  ({nl}  linn  ( [n]  D1  n  nl)). 

Iinn_perpl_0  :  linn  ([n]  perpl  D1  n) . 

linn_perpl  :  linn  ( [n]  perpl  (D1  n)  N) 

<-  ({pi}  linn  ([n]  D1  n  pi)). 

linn_forallr  :  linn  ( Cn]  forallr  (D1  n)  P) 

<-  ({a}  {pi}  linn  ( [n]  D1  n  a  pi)). 

linn_f oralll_0  :  linn  ( [n]  foralll  T  D1  n) . 

linn_foralll  ;  linn  ( Cn]  foralll  T  (D1  n)  N) 

<-  ({nl}  linn  ( Cn]  D1  n  nl)). 

*/.  no  linn_!r_0  :  n  is  negative 

*/,  no  linn_!r:  n  may  not  occur  in  Dl. 


A  COMPLETE  IMPLEMENTATION 


43 


linn_!l_0  :  linn  ( [n]  !1  Dl!  n) . 

linn_!l  :  linn  ( [n]  !1  (Dl!  n)  N) 

<-  ({nl!>  linn  ([n]  Dl!  n  nl!)). 

linn_!d  :  linn  ( [n]  !d  (Dl  n)  N!) 

<-  ({nl}  linn  (Cn]  Dl  n  nl)). 

linn_?r  :  linn  ( [n]  ?r  (Dl?  n)  P) 

<-  ({pl?>  linn  ([n]  Dl?  n  pi?)). 


linn_?l_0  :  linn  ( [n]  ?1  Dl  n) . 
y,  no  linn_?l:  n  may  not  occur  in  Dl 
linn_?d 


:  linn  ( [n]  ?d  (Dl  n)  P?) 

<-  ({pi}  linn  ([n]  Dl  n  pi)). 


y.y.  Linear  derivations:  all  subderivations  must  be 
y.y.  linear  as  required. 

lin  :  #  ->  type. 


‘/jnode  -lin  +D 
'/.lex  D 


lin_axiom 


lin  (axiom  N  P) . 


lin_timesr  :  lin  (timesr  Dl  D2  P) 

<-  linp  Dl 
<-  linp  D2 

<-  ({pi}  lin  (Dl  pD) 

<-  ({p2}  lin  (D2  p2)). 

lin_timesl  :  lin  (timesl  Dl  N) 

<-  ({n2}  linn  ([nl]  Dl  nl  n2)) 
<-  ({nl}  linn  ( [n2]  Dl  nl  n2)) 
<-  ({nl}  {n2}  lin  (Dl  nl  n2)). 

lin_oner  :  lin  (oner  P). 


lin_onel  :  lin  (onel  D  N) 
<-  lin  D. 


lin_andr  :  lin  (andr  Dl  D2  P) 

<-  linp  Dl 
<-  linp  D2 

<-  ({pi}  lin  (Dl  pD) 
<-  ({p2}  lin  (D2  p2)). 
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lin_andll 

liB._andl2 

lin_topr 
'/,  no  topi 
lin_perpr 

lin_perpl 

lin_f orallr 

lin_f oralll 

lin_ !  r 

lin_!l 

lin_ !  d 

lin_?r 

lin_?l 

lin_?d 


lin  (andll  D1  N) 

<-  linn  D1 

<-  ({nl}  lin  (D1  nl)). 

lin  (andl2  D2  N) 

<-  linn  D2 

<-  ({n2}  lin  (D2  n2)). 
lin  (topr  P) . 


lin 

(perpr  Dl 

P) 

<- 

linn  Dl 

<- 

({nl}  lin 

(Dl  nl)) 

lin 

(perpl  Dl 

N) 

<- 

linp  Dl 

<- 

({pi}  lin 

(Dl  pD) 

lin  (forallr 

Dl  P) 

<-  (•Ca:i}  linp  (D1  a)) 

<-  «a}  {pi}  lin  (D1  a  pi)). 

:  lin  (foralll  T  D1  N) 

<-  linn  D1 

<-  ({nl}  lin  (D1  nl)). 

lin  (!r  D1  P) 

<-  linp  D1 

<-  ({pi}  lin  (D1  pi) ) . 

lin  (!1  Dl!  N) 

<-  ({nl!}  lin  (Dl!  nl!)). 

lin  (!d  Dl  N!) 

<-  linn  Dl 

<-  ({nl}  lin  (Dl  nl)). 

lin  (?r  Dl?  P) 

<-  ({pi?}  lin  (Dl?  pi?)). 

lin  (?1  Dl  N) 

<-  linn  Dl 

<-  ({nl}  lin  (Dl  nl)). 

lin  (?d  Dl  P?) 

<-  linp  Dl 

<-  ({pi}  lin  (Dl  pD). 


Linear  derivation  of  B  — >  C  (common  case). 
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lin2  :  (neg  B  ->  pos  C  ->  #)  ->  type. 

y^ode  -lin2  +D 
y.lex  D 


lin2_all  :  lin2  D 

<-  ({p>  linn  ([n]  D  n  p)) 
<-  ({n}  linp  ([p]  D  n  p)) 
<-  ({n}  {p}  lin  (D  n  p)). 


y,  linear  in  n 
y,  linear  in  p 

y.  subderivations  are  all  linear 


A. 4  Admissibility  of  Cut 
y,f  ile  admit .  elf 

ad  :  -CA;o>  (pos  A  ->  #)  ->  (neg  A  ->  #)  ->  #  ->  type, 
ad!  :  {A:o}  (pos  A  ->  #)  ->  (neg!  A  ->  #)  ->  #  ->  type, 

ad?  :  {A:o}  (pos?  A  ->  #)  ->  (neg  A  ->  #)  ->  #  ->  type. 

•/unode  -ad!  +A1  +D1!  +E1  -FI 

•/unode  -ad?  +A2  +D2  +E2!  -F2 

'/(mode  -ad  +A3  +D3  +E3  -F3 

•/.lex  <A1  A2  A3}  O  {Dl!  D2  D3}  {El  E2!  E3> 

*/,*/,  1.  Axiom  Cases 

ad_axiom_l  :  ad  A  ( [p]  axiom  N  p)  E  (E  N) . 

ad_axiom_r  :  ad  A  D  ( [n]  axiom  n  P)  (D  P) . 

*/,*/,  2.  Essential  Cases 

*/,  Essential  cases,  multiplicatives 

ad_times  :  ad  (A1  times  A2)  ( [p]  timesr  Dl  D2  p)  ( [n]  timesl  El  n)  F 
<-  ({n2;neg  A2}  ad  A1  Dl  ([nl]  El  nl  n2)  (El’  n2)) 

<-  ad  A2  D2  El’  F. 

ad_one  :  ad  (one)  ( [p]  oner  p)  ( [n]  onel  El  n)  El. 

'/,  Essential  cases,  additives 

ad_andl  :  ad  (A1  and  A2)  ( [p]  sindr  Dl  D2  p)  ( [n]  andll  El  n)  F 
<-  ad  A1  Dl  El  F. 

ad_and2  :  ad  (A1  and  A2)  ( [p]  andr  Dl  D2  p)  ( [n]  andl2  E2  n)  F 
<-  ad  A2  D2  E2  F. 

'/.  No  essential  case  for  additive  unit 
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'/,  Essentional  case,  involution 

ad.perp  :  ad  (perp  Al)  ( Cp]  perpr  D1  p)  ( Cn]  perpl  El  n)  F 
<-  ad  Al  El  D1  F. 

'/,  Essential  case,  quantifier 

ad.forall  :  ad  (forall  Al)  ( [p]  forallr  D1  p)  (Cn]  foralll  T  El  n)  F 
<-  ad  (Al  T)  (D1  T)  El  F. 

*/,  Essential  cases,  exponentials 

ad_!  :  ad  (!  Al)  ( Cp]  !r  Dl!  p)  ( Cn]  !1  El  n)  F 
<-  ad!  Al  Dl!  El  F. 

ad_?  ;  ad  (?  Al)  ( Cp]  ?r  Dl  p)  ( Cn]  ?1  El!  n)  F 
<-  ad?  Al  Dl  El!  F. 

*/,*/,  3.  Structural  Cases 

ad!_d  :  ad!  A  D!  (Cn!]  !d  (El  n!)  n!)  F 

<-  ({nl:neg  A}  ad!  A  D!  (Cn!]  El  n!  nl)  (El’  nl)) 

<-  ad  A  D !  El’  F. 

ad?_r  :  ad?  A  ( Cp?]  ?d  (Dl  p?)  p?)  E!  F 

<-  ({pl:pos  A}  ad?  A  (Cp?]  Dl  p?  pi)  El  (Dl’  pD) 

<-  ad  A  Dl’  E!  F. 

*/,'/,  4.  Commutative  Cases 

'/.  4.1  Right  commutative  cases  of  Cut 

*/,  No  commutative  cases  crossing  axioms 

*/,  Crossing  multiplicatives 

adr_timesrl  :  ad  A  D  ( Cn]  timesr  (El  n)  E2  P)  (timesr  El’  E2  P) 

<-  ({pl:pos  Bl>  ad  A  D  ( Cn]  El  n  pi)  (El’  pD). 

adr_timesr2  :  ad  A  D  ( Cn]  timesr  El  (E2  n)  P)  (timesr  El  E2’  P) 

<-  ({p2:pos  B2}  ad  A  D  (Cn]  E2  n  p2)  (E2’  p2)). 

adr.timesl  :  ad  A  D  ( Cn]  timesl  (El  n)  N)  (timesl  El’  N) 

<-  ({nl:neg  Bl}  {n2:neg  B2} 

ad  A  D  (Cn]  El  n  nl  n2)  (El’  nl  n2)). 

*/,  No  case  for  oner 

adr_onel  :  ad  A  D  ( Cn]  onel  (El  n)  N)  (onel  El’  N) 

<-  ad  A  D  El  El’ . 
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•/,  Crossing  additives 

adr_andr  :  ad  A  D  ( [n]  andr  (El  n)  (E2  n)  P)  (andr  El’  E2’  P) 

<-  ({plrpos  Bl}  ad  A  D  ( [n]  El  n  pi)  (El’  pi)) 

<-  ({p2:pos  B2}  ad  A  D  ( [n]  E2  n  p2)  (E2’  p2)). 

adr_andll  :  ad  A  D  ( [n]  andll  (El  n)  N)  (andll  El’  N) 

<-  ({nlrneg  Bl}  ad  A  D  ( [n]  El  n  nl)  (El’  nl)). 

adr_andl2  :  ad  A  D  (Cn]  andl2  (E2  n)  N)  (andl2  E2’  N) 

<-  ({n2:neg  B2}  ad  A  D  ( [n]  E2  n  n2)  (E2’  n2)). 

adr_topr  :  ad  A  D  ( [n]  topr  P)  (topr  P) . 

'/,  no  topi  rule 

'/,  Crossing  involution 

adr.perpr  :  ad  A  D  ( [n]  perpr  (El  n)  P)  (perpr  El’  P) 

<-  ({nl:neg  Bl}  ad  A  D  ([n]  El  n  nl)  (El’  nl)). 

adr_perpl  :  ad  A  D  ([n]  perpl  (El  n)  N)  (perpl  El’  N) 

<-  ({pl;pos  Bl}  ad  A  D  ([n]  El  n  pi)  (El’  pD). 

*/,  Crossing  quantifier 

adr_forallr  :  ad  A  D  ( [n]  forallr  (El  n)  P)  (forallr  El’  P) 

<-  ({a:!}  {plrpos  (Bl  a)}  ad  A  D  ( [n]  El  n  a  pi)  (El’  a  pi)). 

adr_foralll  :  ad  A  D  ( [n]  foralll  T  (El  n)  N)  (foralll  T  El’  N) 

<-  (-Cnl}  ad  A  D  ( [n]  El  n  nl)  (El’  nl)). 

'/,  Crossing  exponentials 

'/.  no  adr_!r  since  there  are  no  linear  side  formulas 

'/.  Meta-level  weakening  is  required  in  next  case 
adr_!l  :  ad  A  D  ( [n]  !1  (El  n)  N)  (!1  El’  N) 

<-  ({nl!:neg!  Bl}  ad  A  D  ([n]  El  n  nlO  (El’  nl!)). 

adr_!d  :  ad  A  D  ( [n]  Id  (El  n)  Nl)  (Id  El’  N!) 

<-  ({nl;neg  B}  ad  A  D  (Cn]  El  n  nl)  (El’  nl)). 

'/,  Meta-level  weakening  is  required  in  next  case 
adr_?r  :  ad  A  D  ( [n]  ?r  (El  n)  P)  (?r  El’  P) 

<-  ({pl?:pos?  Bl}  ad  A  D  ( [n]  El  n  pi?)  (El’  pi?)). 

*/,  no  adr_?l  since  there  are  no  linear  side  formulas 

adr_?d  :  ad  A  D  ( [n]  ?d  (El  n)  P?)  (?d  El’  P?) 

<-  ({pl:pos  B}  ad  A  D  ([n]  El  n  pi)  (El’  pD). 
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'/,  4.2  Left  commutative  cases  of  Cut 
'/,  No  commutative  cases  crossing  axioms 
'/.  Crossing  multiplicatives 

adl_timesrl  :  ad  A  ( [p]  timesr  (D1  p)  D2  P)  E  (timesr  Dl’  D2  P) 

<-  ({pl:pos  Bl}  ad  A  ( [p]  Dl  p  pi)  E  (Dl’  pD). 

adl_timesr2  :  ad  A  ( Cp]  timesr  Dl  (D2  p)  P)  E  (timesr  Dl  D2’  P) 

<-  ({p2:pos  B2}  ad  A  ([p]  D2  p  p2)  E  (D2’  p2)). 

adl_timesl  :  ad  A  ( Cp]  timesl  (Dl  p)  N)  E  (timesl  Dl’  N) 

<-  ({nl:neg  Bl}  ■Cn2:neg  B2} 

ad  A  (Cp]  Dl  p  nl  n2)  E  (Dl’  nl  n2)). 

'/,  No  case  for  oner 

adl_onel  :  ad  A  ( Cp]  onel  (Dl  p)  N)  E  (onel  Dl’  N) 

<-  ad  A  Dl  E  Dl’ . 

*/,  Crossing  additives 

adl_andr  :  ad  A  ( Cp]  andr  (Dl  p)  (D2  p)  P)  E  (andr  Dl’  D2’  P) 

<-  (■Cpl;pos  Bl}  ad  A  ( Cp]  Dl  p  pi)  E  (Dl’  pi)) 

<-  ({p2:pos  B2}  ad  A  ( Cp]  D2  p  p2)  E  (D2’  p2)). 

adl_andll  :  ad  A  ( Cp]  andll  (Dl  p)  N)  E  (andll  Dl’  N) 

<-  ({nl:neg  Bl}  ad  A  ( Cp]  Dl  p  nl)  E  (Dl’  nl)). 

adl_andl2  :  ad  A  ( Cp]  andl2  (D2  p)  N)  E  (andl2  D2’  N) 

<-  ({n2:neg  Bl}  ad  A  ( Cp]  D2  p  n2)  E  (D2’  n2)). 

adl_topr  :  ad  A  ( Cp]  topr  P)  E  (topr  P) . 

*/.  no  topi  rule 

'/,  Crossing  involution 

adl_perpr  :  ad  A  ( Cp]  perpr  (Dl  p)  P)  E  (perpr  Dl’  P) 

<-  ({nl:neg  Bl}  ad  A  ( Cp]  Dl  p  nl)  E  (Dl’  nl)). 

adl_perpl  :  ad  A  ( Cp]  perpl  (Dl  p)  N)  E  (perpl  Dl’  N) 

<-  ({pl:pos  Bl}  ad  A  ( Cp]  Dl  p  pi)  E  (Dl’  pi)). 

*/.  Crossing  quantifier 

adl.forallr  :  ad  A  (Cp]  forallr  (Dl  p)  P)  E  (forallr  Dl’  P) 

<-  ({a:i}  {pl:pos  (Bl  a)}  ad  A  ([p]  Dl  p  a  pi)  E  (Dl’  a  pi)). 
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adl_foralll  :  ad  A  ( Cp]  foralll  T  (D1  p)  N)  E  (foralll  T  Dl’  N) 

<-  (-Cnl}  ad  A  ( [p]  Dl  p  nl)  E  (Dl'  nl)). 

'/,  Crossing  exponentials 

’/,  no  adl_!r  since  there  are  no  linear  side  formulas 

adl_!l  :  ad  A  ( [p]  !1  (Dl  p)  N)  E  (!1  Dl'  N) 

<-  (-Cnlhneg!  Bl}  ad  A  ( Cp]  Dl  p  nl ! )  E  (Dl'  nlO). 

adl_!d  :  ad  A  ([p]  !d  (Dl  p)  N!)  E  (!d  Dl'  N!) 

<-  (-Cnl:neg  B}  ad  A  ( [p]  Dl  p  nl)  E  (Dl'  nl)). 

adl_?r  ;  ad  A  ( [p]  ?r  (Dl  p)  P)  E  (?r  Dl'  P) 

<-  ({pl?;pos?  Bl}  ad  A  ( Cp]  Dl  p  pi?)  E  (Dl'  pi?)). 

•/,  no  adl_?l  since  there  are  no  linear  side  formulas 

adl_?d  :  ad  A  ( Cp]  ?d  (Dl  p)  P?)  E  (?d  Dl'  P?) 

<-  (•Cpl:pos  B}  ad  A  ( Cp]  Dl  p  pi)  E  (Dl'  pi)). 

*/,  4.3  Right  commutative  cases  of  Cut! 

*/,  Crossing  axioms 

ad!r_axiom  :  ad  I  A  Dl  (Cn!]  axiom  N  P)  (axiom  N  P). 

*/.  Crossing  mult ipli cat ives 

ad!r_timesr  :  ad!  A  D!  (Cnl]  timesr  (El  n!)  (E2  n!)  P) 

(timesr  El'  E2'  P) 

<-  ({pl:pos  Bl}  ad!  A  D!  (Cnl]  El  n!  pi)  (El'  pD) 

<-  (Lp2:pos  B2}  ad!  A  D!  (Cnl]  E2  n!  p2)  (E2'  p2)). 

ad!r_timesl  ;  ad!  AD!  (Cnl]  timesl  (El  n!)  N)  (timesl  El'  N) 

<-  ({nl:neg  Bl}  {n2;neg  B2} 

ad!  A  D!  (Cnl]  El  n!  nl  n2)  (El'  nl  n2)). 

ad!r_oner  :  ad!  AD!  (Cn!]  oner  P)  (oner  P) . 

ad!r_onel  ;  ad!  AD!  (Cnl]  onel  (El  n!)  N)  (onel  El'  N) 

<-  ad!  A  Dl  El  El’. 

'/.  Crossing  additives 

ad!r_andr  ;  ad!  A  D!  (Cnl]  andr  (El  n!)  (E2  n!)  P)  (andr  El'  E2  P) 
<-  ({pl:pos  Bl}  ad!  A  D!  (Cnl]  El  n!  pi)  (El'  pD) 

<-  (■[p2:pos  B2}  ad!  A  D!  (Cnl]  E2  n!  p2)  (E2'  p2)). 

ad!r_andll  :  ad!  AD!  (Cnl]  andll  (El  n!)  N)  (andll  El'  N) 

<-  ({nl:neg  Bl}  ad!  A  D!  (Cnl]  El  n!  nl)  (El'  nl)). 
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ad!r_andl2  :  ad!  ADI  ([nl]  andl2  (E2  nl)  K)  (andll  E2>  N) 

<-  ({n2:neg  B2>  ad!  A  D!  ([n!]  E2  nl  n2)  (E2’  n2)). 

ad!r_topr  :  ad!  A  D!  ([nl]  topr  P)  (topr  P). 

7.  no  topi  rule 

7.  Crossing  involutions 

ad!r_perpr  :  ad!  A  D!  ([nl]  perpr  (El  n!)  P)  (perpr  El’  P) 

<-  (-Cnlineg  Bl}  ad!  A  D!  ([nl]  El  n!  nl)  (El’  nl)). 

ad!r_perpl  :  ad!  AD!  ([nl]  perpl  (El  n!)  N)  (perpl  El’  N) 

<-  ({pl:pos  Bl}  ad!  A  D!  ([nl]  El  n!  pi)  (El’  pi)). 

7.  Crossing  quantifiers 

ad!r_forallr  :  ad!  A  D!  ([nl]  forallr  (El  n!)  P)  (forallr  El’  P) 

<-  (-{a:!}  ■[pl;pos  (Bl  a)} 

ad!  A  D!  ([nl]  El  n!  a  pi)  (El’  a  pD). 

ad!r_foralll  :  ad!  AD!  ([nl]  foralll  T  (El  n!)  N)  (foralll  T  El’  N) 
<-  (-Cnl}  ad!  A  D!  ([nl]  El  n!  nl)  (El’  nl)). 

7.  Crossing  exponentials 

ad!r_!r  :  ad!  A  D!  ([nl]  !r  (El!  n!)  P)  (!r  Ell’  P) 

<-  ({pl;pos  Bl}  ad!  A  D!  ([nl]  El!  n!  pi)  (Ell’  pD). 

ad!r_!l  :  ad!  A  D!  ([nl]  !1  (El  n!)  N)  (!1  El’  N) 

<-  (<nl!;neg!  Bl}  ad!  A  D!  ([n!]  El  n!  nl ! )  (El’  nl!)). 

ad!r_!d  :  ad!  A  D!  ([nl]  Id  (El  n!)  N!)  (Id  El’  N!) 

<-  ({nl:neg  B}  ad!  A  D!  ([nl]  El  n!  nl)  (El’  nl)). 

ad!r_?r  :  ad!  A  D!  ([nl]  ?r  (El  n!)  P)  (?r  El’  P) 

<-  (-CplTzpos?  Bl}  ad!  A  D!  ([nl]  El  n!  pi?)  (El’  pi?)). 

ad!r_?l  :  ad!  A  D!  ([nl]  ?1  (El!  n!)  N)  (?1  Ell’  N) 

<-  (-[nl:neg  Bl}  ad!  A  D!  ([nl]  El!  n!  nl)  (Ell’  nl)). 

ad!r_?d  :  ad!  A  D!  ([nl]  ?d  (El  n!)  P?)  (?d  El’  P?) 

<-  ({plipos  B}  ad!  A  D!  ([nl]  El  n!  pi)  (El’  pD). 

7.  4.4  No  left  commutative  cases  for  Cut! 

7.  Right  commutative  or  structural 
7.  cases  will  always  be  applicable  for  ad! 

7t  4.5  No  right  commutative  cases  for  Cut? 

7.  Left  commutative  cases  or  structural 
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'/,  cases  will  always  be  applicable  for  ad? 

'/,  4.6  Left  commutative  cases  for  Cut? 

*/,  Crossing  axioms 

ad?l_axiom  :  ad?  A  ( [p?]  axiom  N  P)  E!  (axiom  N  P). 

*/.  Crossing  multiplicatives 

ad?l_timesr  :  ad?  A  ( [p?]  timesr  (D1  p?)  (D2  p?)  P)  E!  (timesr  Dl’  D2’  P) 
<-  ({pl:pos  Bl}  ad?  A  ( [p?]  Dl  p?  pi)  E!  (Dl'  pD) 

<-  ({p2:pos  B2>  ad?  A  ( Cp?]  D2  p?  p2)  E!  (D2’  p2)). 

ad?l_timesl  :  ad?  A  ( [p?]  timesl  (Dl  p?)  N)  E!  (timesl  Dl’  N) 

<-  (lnl:neg  Bl}  -Cn2:neg  B2} 

ad?  A  ([p?]  Dl  p?  nl  n2)  E!  (Dl’  nl  n2)). 

ad?l_oner  :  ad?  A  ( Cp?]  oner  P)  E!  (oner  P). 

ad?l_onel  ;  ad?  A  ( [p?]  onel  (Dl  p?)  N)  E!  (onel  Dl’  N) 

<-  ad?  A  Dl  E!  Dl’. 

'/,  Crossing  additives 

ad?l_andr  :  ad?  A  ( Cp?]  andr  (Dl  p?)  (D2  p?)  P)  E!  (andr  Dl’  D2’  P) 

<-  (■Cpl:pos  Bl}  ad?  A  ( Cp?]  Dl  p?  pi)  E!  (Dl’  pD) 

<-  (■Cp2:pos  B2}  ad?  A  (Cp?]  D2  p?  p2)  E!  (D2’  p2)). 

ad?l_andll  :  ad?  A  ( Cp?]  andll  (Dl  p?)  N)  E!  (andll  Dl’  N) 

<-  (■Cnl:neg  Bl}  ad?  A  ( Cp?]  Dl  p?  nl)  E!  (Dl’  nl)). 

ad?l_andl2  :  ad?  A  ( Cp?]  andl2  (D2  p?)  N)  E!  (andl2  D2’  N) 

<-  (■Cn2:neg  B2}  ad?  A  ( Cp?]  D2  p?  n2)  E!  (D2  ’  n2)). 

ad?l_topr  :  ad?  A  ( Cp?]  topr  P)  E!  (topr  P) . 

'/.  no  topi  rule 

'/,  Crossing  involutions 

ad?l_perpr  :  ad?  A  ( Cp?]  perpr  (Dl  p?)  P)  E!  (perpr  Dl’  P) 

<-  ({nl:neg  Bl}  ad?  A  ( Cp?]  Dl  p?  nl)  E!  (Dl’  nl)). 

ad?l_perpl  :  ad?  A  (Cp?]  perpl  (Dl  p?)  N)  E!  (perpl  Dl’  N) 

<-  ({pl:pos  Bl}  ad?  A  ( Cp?]  Dl  p?  pi)  E!  (Dl’  pD). 

*/,  Crossing  quantifiers 

ad?l_forallr  :  ad?  A  ( Cp?]  forallr  (Dl  p?)  P)  E!  (forallr  Dl’  P) 

<-  ({a:i}  -Cplrpos  (Bl  a)} 
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ad?  A  ([p?]  D1  p?  a  pi)  E!  (Dl>  a  pD). 

ad?l_foralll  ;  ad?  A  ( [p?]  foralll  T  (D1  p?)  N)  E!  (foralll  T  Dl’  N) 
<-  ({nl}  ad?  A  ( Cp?]  D1  p?  nl)  E!  (Dl’  nl)). 

'/,  Crossing  exponentials 


ad?l. 

Jr  : 

:  ad? 

A  ([p?] 

!r 

(Dl 

1  p? 

)  P)  E! 

(!r  Dll'  P) 

<- 

({pl:pos 

Bl}  ad?  A 

(Cp?]  Dl!  p?  pi)  E! 

(Dll’ 

pD). 

ad?l. 

J1  : 

:  ad? 

A  (Cp?] 

!1 

(Dl 

P?) 

N)  E!  ( 

11  Dl' 

N) 

<- 

(■(nl !  :neg! 

Bl} 

ad? 

A  (Cp?] 

Dl  p? 

nl!) 

E! 

(Dl 

’  nl!)) 

ad?l. 

Jd  : 

:  ad? 

A  (Cp?] 

!d 

(Dl 

P?) 

Nl)  El 

(Id  Dl 

’  N!) 

<- 

(-Cnl:neg 

B} 

■  ad?  A 

(Cp?]  Dl 

p?  nl)  E!  (Dl' 

'  nl)). 

ad?l. 

.?r  : 

:  ad? 

A  (Cp?] 

?r 

(Dl 

P?) 

P)  E!  (?r  Dl’ 

P) 

<- 

(-Cpl?:pos? 

Bl} 

ad? 

A  (Cp?] 

Dl  p? 

pi?) 

E! 

(Dl 

’  pi?)) 

ad?l. 

.?1  : 

ad? 

A  (Cp?] 

?1 

(Dl! 

i  p? 

)  N)  E! 

(?1  Dl 

!’  N) 

<- 

({nl:neg 

Bl}  ad?  A 

(Cp?]  Dl!  p?  nl)  E! 

(Dll’ 

nl)). 

ad?l. 

.?d  : 

ad? 

A  (Cp?] 

?d 

(Dl 

P?) 

P?)  E! 

(?d  Dl 

'  P?) 

<- 

({pl:pos 

B} 

ad?  A 

(Cp?]  Dl 

p?  pi)  E!  (Dl' 

'  pD). 

A. 5  Example  Execution  of  Admissibility  Algorithm 

In  this  subsection  we  give  derivations  of  \{A—oB)  — >  \A—o]B  and  !A— o!B  — >  — o?(A-‘') 

and  then  apply  admissibility  of  cut  to  obtain  a  derivation  of  !(A  —oB)  — y  ?(B-‘')  -ol{A^).  These 
derivations  are  complicated  by  the  fact  that  A— oB  is  defined  as  (A  O  B-^)-^.  We  omit  empty 
exponential  hypotheses  or  conclusions  and  abbreviate  =  (AO  B-‘-)'*-,  A. 

■I 


^o;B  — y  B 


’fo;A^A 


^o;A — yA®B^,B 
^o-{A®B^)^,A^  B 


-R 

■®R 


■^-oiA 


B 


■\D 


^o; 


B 


\D 


{A®B^)^,A--^\B 


{A®B^)^-M^'B 


■\R 

■\L 


!((A®B-^)-^),!A  — +  !B 
!((A®B^)^),!A,(!B)-^— ^ 
!((A®B^)^),’A®(!B)-^  — 


■!L 


±\± 


—>L 
■®L 
-R 


l{iA®B^)^)^{lA®{\B)^) 
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A 


A:  A-* 


B:B 


B 


A,A^;A-^ 


A;A-^ 


-.i? 

-ID 


B-,B,B^ 


\A;A^ 


■\R 


5;B-‘ 


!A,?(A-L) 


■7R 


-  —iL 

-\D 

■7L 


7{B^),\B 


■\L 


!A 


7iB^)-^(\B)- 


ni? 


?(5^),(?(A^)) 


\A®{\By 


■®R 


XnnX 


?(B^)®(?(A-^)) 


\A®i\By 


-®L 


{\A®{\B)^)^,7{B^)®{7{A^))^ 

(!A  ®  (!5)^)^  {7{B^)  ®  (?(A^))'-)^ 


-R 


Below  we  show  the  representation  of  the  first  derivation  and  the  check  that  it  is  linear,  the  rep¬ 
resentation  of  the  second  derivation  and  its  linearity  check,  and  then  the  Elf  query  that  applies  the 
admissibility  algorithm  to  these  to  deductions.  There  are  6768  different  computation  sequences  of 
the  non-deterministic  admissibility  algorithm,  many  of  them  leading  to  distinct  cut-free  derivations 
(they  differ  by  permutations  of  successive  inference  rules).  On  a  Dec  Alpha  it  takes  the  current  Elf 
implementation  221  seconds  wall-clock  time  to  enumerate  all  solutions.  We  leave  it  as  an  exercise 
to  the  diligent  reader  to  translate  the  first  solution  to  a  sequent  derivation  in  ordinary  notation. 


-  top  () ; 

Using:  admit. elf  linear. elf  elim.elf 

Solving  for:  ad  ad!  ad?  linp  linn  lin  lin2  elim 

?-  ■CA:o}  {B:o} 

lin2 

([n:neg  (!  (perp  (A  times  (perp  B))))] 

[p:pos  (perp  ((!  A)  times  (perp  (!  B))))] 

(perpr  ([nl:neg  ((!  A)  times  (perp  (!  B)))] 
timesl  ([n4:neg  (!  A)] 

[n5:neg  (perp  (!  B))] 
perpl  ([p6:pos  (!  B)3 

!1  ([n7!:neg!  (perp  (A  times  (perp  B)))] 

!1  ([n8!:neg!  A] 

!r  ([p9:pos  B] 

!d  ([nlO:neg  A] 

!d  ([nll:neg  (perp  (A  times  (perp  B)))] 

perpl  ([pl2:pos  (A  times  (perp  B))] 

timesr  ([pl3:pos  A]  axiom  nlO  pl3) 
([pl4:pos  (perp  B)] 

perpr  ([nl5:neg  B]  axiom  nl5  p9) 
pl4) 
pl2) 

nil) 

n7!) 

nS ! ) 


p6) 

n4) 


n) 
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p)) . 


nl) 


n5 ) 


Solving. . . 

solved 

yes 

?-  {A:o}  {B;o} 
lin2 

([n:neg  (perp  ((!  A)  times  (perp  (!  B))))] 

[p:pos  (perp  ((?  (perp  B))  times  (perp  (?  (perp  A)))))] 
perpr  ([nl:neg  ((?  (perp  B))  times  (perp  (?  (perp  A))))] 
perpl  ([p2:pos  ((!  A)  times  (perp  (!  B)))] 
timesl  ([n3:neg  (?  (perp  B))] 

[n4:neg  (perp  (?  (perp  A)))] 
timesr  ([p5:pos  (!  A)] 

perpl  ([p6;pos  (?  (perp  A))] 

^r  ([p7?:pos7  (perp  A)] 

!r  ([p8:pos  A] 

?d  ([p9:pos  (perp  A)] 

perpr  ([nlO;neg  A]  a:ciom  nlO  p8) 
p9) 

p7?) 

p5) 

p6) 

n4) 

([pll:pos  (perp  (!  B))] 
perpr  ([nl2:neg  (!  B)] 

!1  ([nl3!:neg!  B] 

71  ([nl4:neg  (perp  B)] 

!d  ([nlS:neg  B] 

perpl  ([pl6:pos  B]  axiom  nlS  pl6) 
nl4) 

nl3!) 

n3) 

nl2) 


P)  • 


n) 


nl) 


pll) 

p2) 


Solving. . . 

solved 

yes 

7-  {A:o}  ■CB:o} 

{Hineg  (!  (perp  (A  times  (perp  B))))} 

{P:pos  (perp  ((7  (perp  B))  times  (perp  (7  (perp  A)))))} 
ad  (perp  ((!  A)  times  (perp  (!  B)))) 

([p:pos  (perp  ((!  A)  times  (perp  (!  B))))] 

(perpr  ([nl:neg  ((!  A)  times  (perp  (!  B)))] 
timesl  ([n4:neg  (!  A)] 

[n5:neg  (perp  (!  B))] 
perpl  ([p6:pos  (!  B)] 

11  ([n7!:neg!  (perp  (A  times  (perp  B)))] 

11  ( [n8 1 : neg!  A] 

!r  ([p9;pos  B] 

Id  ([nlOrneg  A] 

!d  ([nll:neg  (perp  (A  times  (perp  B)))] 

perpl  ([pl2:pos  (A  times  (perp  B))] 

timesr  ([pl3:pos  A]  axiom  nlO  pl3) 
([pl4:pos  (perp  B)] 

perpr  ([nl5:neg  B]  axiom  nl5  p9) 
pl4) 
pl2) 
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nil) 


n7!) 


n4) 


p6) 


n8!) 


H) 


nS) 


nl) 


p)) 

([n:neg  (perp  ((!  A)  times  (perp  (!  B))))] 

perpr  ([nl:neg  ((?  (perp  B))  times  (perp  (?  (perp  A))))] 
perpl  ([p2:pos  ((!  A)  times  (perp  (!  B)))] 
timesl  ([n3:neg  (?  (perp  B))] 

[n4:neg  (perp  (?  (perp  A)))] 
timesr  ([p5:pos  (!  A)] 

perpl  ([p6;pos  (?  (perp  A))] 

?r  ([p7?:pos?  (perp  A)] 
!r  ([p8:pos  A] 


p5) 


?d  ([p9:pos  (perp  A)] 

perpr  ([nlO:neg  A]  axiom  nlO  pS) 
p9) 

p7?) 


p6) 

n4) 

([pll;pos  (perp  (!  B))] 
perpr  ([nl2:neg  (!  B)] 

!1  ([nl3! :neg!  B] 

?1  ([nl4:neg  (perp  B)] 
!d  ( [nlS ;neg  B] 


n3) 


nl3!) 


perpl  ([pl6:pos  B]  axiom  nl5  pl6) 
nl4) 


nl) 


p2) 


pll) 


nl2) 


n) 


P) 

(F  A  B  H  P) . 
Solving. . . 


F  = 


[A:o]  [B;o]  [H;neg  (!  (perp  (A  times  perp  B)))] 

[P:pos  (perp  (?  (perp  B)  times  perp  (?  (perp  A))))] 
perpr 

([nl:neg  (?  (perp  B)  times  perp  (7  (perp  A)))] 
timesl 

([nll:neg  (?  (perp  B))]  [n2:neg  (perp  (?  (perp  A)))] 
!1  ([nl!:neg!  (perp  (A  times  perp  B))] 
perpl 

([pl:pos  (?  (perp  A))] 

?r  ([pl7:pos?  (perp  A)! 


71  ([nlll:neg  (perp  B)] 
perpl 

( [pll ;pos  B] 

!d  ([nllll:neg  (perp  (A  times  perp  B))] 
perpl 

([pllll:pos  (A  times  perp  B)] 
timesr 

( [plllll :pos  A] 

7d  ([p9:pos  (perp  A)] 

perpr  ([nlO:neg  A]  axiom  nlO  plllll) 
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p9) 

pi?) 

( [p2 :pos  (perp  B)] 

perpr  ([nlllll:neg  B]  euciom  nlllll  pll)  p2) 
pllll) 

nllll) 

nl ! ) 

nlll) 

nil) 

pi) 

n2) 

H) 

nl) 

P. 


yes 

A. 6  Sequent  Calculus  LV*"  with  Cuts 

*/,f  ile  Iv-cut .  elf 

Q  :  type.  '/,  Token  (for  derivations  with  Cuts) 

Axioms 


axiom* 

:  (neg  A  ->  pos  A  ->  Q) . 

*/,*/,  Multiplicative  Connectives 

timesr* 

:  (pos  A  ->  Q) 

->  (pos  B  ->  Q) 

->  (pos  (A  times  B)  ->  Q) . 

timesl" 

;  (neg  A  ->  neg  B  ->  Q) 

->  (neg  (A  times  B)  ->  Q) . 

oner"  : 

(pos  one  ->  Q) . 

onel"  : 

->  (neg  one  ->  Q) . 

'/,7.  Additive  Connectives 

andr*  : 

(pos  A  ->  Q)  ->  (pos  B  ->  Q) 
->  (pos  (A  and  B)  ->  @) . 

andll' 

:  (neg  A  ->  Q) 

->  (neg  (A  and  B)  ->  Q) . 

andl2“ 

:  (neg  B  ->  Q) 

->  (neg  (A  and  B)  ->  Q) . 

topr"  : 

(pos  (top)  ->  Q) . 
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*/,  no  topi 

Involution 

perpr"  :  (neg  A  ->  Q) 

->  (pos  (perp  A)  ->  0). 

perpl"  :  (pos  A  ->  Q) 

->  (neg  (perp  A)  ->  Q). 

'/,  Quantifier 

forallr*  :  ({a:i}  pos  (A  a)  ->  Q) 

->  (pos  (forall  A)  ->  Q) . 

foralll'  :  -CT:i>  (neg  (A  T)  ->  Q) 

->  (neg  (forall  A)  ->  Q) . 


y,'/,  Exponentials 


Ir"  : 

:  (pos  A  ->  Q) 

->  (pos  ( 1  A) 

->  0) 

11"  ; 

;  (neg!  A  ->  Q) 

->  (neg  ( !  A) 

->  0) 

Id"  : 

;  (neg  A  ->  Q) 

->  (neg!  A  -> 

0). 

?r"  : 

;  (pos?  A  ->  Q) 

->  (pos  (?  A) 

->  0) 

?1"  ; 

:  (neg  A  ->  0) 

->  (neg  (?  A) 

->  0) 

?d"  : 

:  (pos  A  ->  0) 

->  (pos?  A  -> 

0). 

Cuts 


cut"  :  (pos  A  ->  fl) 

->  (neg  A  ->  Q) 

->  Q. 

cut!"  ;  (pos  A  ->  Q) 

->  (neg!  A  ->  @) 
->  Q. 


(pos?  A  ->  Q) 

->  (neg  A  ->  Q) 
->  Q. 


cut?" 


58 


STRUCTURAL  CUT  ELIMINATION  IN  LINEAR  LOGIC 


A. 7  Cut  Elimination  for  LV*" 

'/.file  elim.elf 

elim  :  ©->#->  type. 

'/.mode  -elim  +D“  -D 

'/.lex  fD“> 

ce_axiom  :  elim  (axiom"  N  P)  (axiom  N  P). 

ce_timesr  :  elim  (timesr"  Dl"  D2"  P)  (timesr  D1  D2  P) 

<-  ({pi}  elim  (Dl"  pi)  (Dl  pi)) 

<-  ({p2}  elim  (D2"  p2)  (D2  p2)). 

ce_timesl  :  elim  (timesl"  Dl"  N)  (timesl  Dl  N) 

<-  ({nl}  {n2}  elim  (Dl"  nl  n2)  (Dl  nl  n2)). 

ce_oner  :  elim  (oner"  P)  (oner  P) . 

ce_onel  :  elim  (onel"  Dl"  N)  (onel  Dl  N) 

<-  elim  Dl"  Dl. 

ce_andr  :  elim  (andr"  Dl"  D2"  P)  (andr  Dl  D2  P) 

<-  ({pi}  elim  (Dl"  pi)  (Dl  pi)) 

<-  ({p2}  elim  (D2"  p2)  (D2  p2)). 

ce_andll  :  elim  (andll"  Dl"  N)  (andll  Dl  N) 

<-  ({nl}  elim  (Dl"  nl)  (Dl  nl)). 

ce_andl2  ;  elim  (andl2"  D2"  N)  (andl2  D2  N) 

<-  ({n2}  elim  (D2"  n2)  (D2  n2)). 

ce_topr  :  elim  (topr"  P)  (topr  P) . 

ce_perpr  :  elim  (perpr"  Dl"  P)  (perpr  Dl  P) 

<-  ({nl}  elim  (Dl"  nl)  (Dl  nl)). 

ce_perpl  :  elim  (perpl"  Dl"  N)  (perpl  Dl  N) 

<-  ({pi}  elim  (Dl"  pi)  (Dl  pi)). 

ce_forallr:  elim  (forallr"  Dl"  P)  (forallr  Dl  P) 

<-  ({a:i}  {pi}  elim  (Dl"  a  pi)  (Dl  a  pi)). 

ce_foralll:  elim  (foralll"  T  Dl"  N)  (foralll  T  Dl  N) 

<-  ({nl}  elim  (Dl"  nl)  (Dl  nl)). 

ce_!r  :  elim  (!r"  Dl!"  P)  (!r  Dll  P) 

<-  ({pi}  elim  (Dl!"  pi)  (Dl!  pD). 

ce_!l  :  elim  (!!"  Dl"  N)  (!1  Dl  N) 

<-  ({nl!}  elim  (Dl"  nl!)  (Dl  nl!)). 
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ce_!d  :  elim  (!d“  Dl*  N!)  (!d  D1  N!) 

<-  ({iil>  elim  (Dl*  nl)  (D1  nl)). 

ce_?r  :  elim  (?r*  D1‘  P)  (?r  D1  P) 

<-  elim  (D1‘  pi?)  (D1  pi?)). 

ce_?l  :  elim  C?!*  Dl!*  N)  (?1  Dl!  N) 

<-  ({nl}  elim  (Dl!*  nl)  (Dll  nl)). 

ce_?d  :  elim  (?d*  Dl'  P?)  (?d  Dl  P?) 

<-  ({pi}  elim  (Dl*  pi)  (Dl  pi)). 

ce_cut  :  elim  (cut*  Dl*  D2*)  F 

<-  ({p}  elim  (Dl*  p)  (Dl  p)) 

<-  ({n}  elim  (D2*  n)  (D2  n)) 

<-  ad  A  Dl  D2  F. 

ce_cut I  ;  elim  (cut!*  Dl!*  D2*)  F 

<-  ({p}  elim  (Dl!*  p)  (Dl!  p)) 

<-  ({n!}  elim  (D2*  n!)  (D2  n!)) 

<-  ad!  A  Dl!  D2  F. 

ce_cut?  ;  elim  (cut?"  Dl"  D2!*)  F 

<-  ({p?}  elim  (Dl*  p?)  (Dl  p?)) 

<-  ({n}  elim  (D2 ! *  n)  (D2!  n)) 

<-  ad?  A  Dl  D2!  F. 
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